CVE-2022-30024

原作者: [db:作者] 来自: [db:来源] 收藏邀请

Current Description

A buffer overflow in the httpd daemon on TP-Link TL-WR841N V12 (firmware version 3.16.9) devices allows an authenticated remote attacker to execute arbitrary code via a GET request to the page for the System Tools of the Wi-Fi network. This affects TL-WR841 V12 TL-WR841N(EU)_V12_160624 and TL-WR841 V11 TL-WR841N(EU)_V11_160325 , TL-WR841N_V11_150616 and TL-WR841 V10 TL-WR841N_V10_150310 are also affected.

View Analysis Description

Severity

CVSS 3.x Severity and Metrics:

NIST: NVD

Base Score: 8.8 HIGH

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD Analysts use publicly available information to associate vector strings and CVSS scores. We also display any CVSS information provided within the CVE List from the CNA.

Note: NVD Analysts have published a CVSS score for this CVE based on publicly available information at the time of analysis. The CNA has not provided a score within the CVE List.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

Hyperlink	Resource
http://tl-wr841.com	Broken Link
http://tp-link.com	Vendor Advisory
https://pastebin.com/0XRFr3zE	Third Party Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-120	Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')	NIST

Known Affected Software Configurations Switch to CPE 2.2

CPEs loading, please wait.

Denotes Vulnerable Software
Are we missing a CPE here? Please let us know.

Change History

1 change records found show changes

Initial Analysis 7/20/2022 9:41:10 PM

Action	Type	Old Value	New Value
Added	CPE Configuration		AND OR cpe:2.3:o:tp-link:tl-wr841_firmware:-::::::: OR cpe:2.3:h:tp-link:tl-wr841:10:::::::* cpe:2.3:h:tp-link:tl-wr841:11:::::::* cpe:2.3:h:tp-link:tl-wr841:12:::::::*
Added	CPE Configuration		AND OR cpe:2.3:o:tp-link:tl-wr841n\(eu\)_firmware:160325::::::: OR cpe:2.3:h:tp-link:tl-wr841n\(eu\):11:::::::*
Added	CPE Configuration		AND OR cpe:2.3:o:tp-link:tl-wr841n_firmware:150310::::::: OR cpe:2.3:h:tp-link:tl-wr841n:10:::::::*
Added	CPE Configuration		AND OR cpe:2.3:o:tp-link:tl-wr841n_firmware:150616::::::: OR cpe:2.3:h:tp-link:tl-wr841n:11:::::::*
Added	CPE Configuration		AND OR cpe:2.3:o:tp-link:tl-wr841n_firmware:3.16.9::::::: OR cpe:2.3:h:tp-link:tl-wr841n:12:::::::*
Added	CVSS V3.1		NIST AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Added	CWE		NIST CWE-120
Changed	Reference Type	http://tl-wr841.com No Types Assigned	http://tl-wr841.com Broken Link
Changed	Reference Type	http://tp-link.com No Types Assigned	http://tp-link.com Vendor Advisory
Changed	Reference Type	https://pastebin.com/0XRFr3zE No Types Assigned	https://pastebin.com/0XRFr3zE Third Party Advisory

鲜花

握手

雷人

路过

鸡蛋

该文章已有0人参与评论

请发表评论

全部评论

专题导读

More+

09-23 CVE-2020-36276

09-18 CVE-2022-36676

09-18 CVE-2022-36674

09-18 CVE-2022-36672

09-18 CVE-2022-36671

09-18 CVE-2022-36675

09-18 CVE-2022-36449

09-18 CVE-2022-36130

09-18 CVE-2022-37130

09-18 CVE-2022-37129

09-18 CVE-2022-37123

09-18 CVE-2022-36619

09-18 CVE-2022-37125

09-18 CVE-2022-36051

09-18 CVE-2022-36620

09-18 CVE-2022-36203

09-18 CVE-2022-36202

09-18 CVE-2022-36201

09-18 CVE-2022-2898

09-18 CVE-2022-2897

09-18 CVE-2022-2896

09-18 CVE-2022-2894

09-18 CVE-2022-2895

09-18 CVE-2022-2892

09-18 CVE-2022-36582

09-18 CVE-2022-36581

09-18 CVE-2022-36580

09-18 CVE-2022-36571

09-18 CVE-2022-36570

09-18 CVE-2022-36569

CVE-2020-14127发布时间：2022-07-29

CVE-2022-30113发布时间：2022-07-29

剪的笔顺,诠释剪的笔画,认识剪的部首

1 六六分期app的软件客服如何联系？(六六分期

六六分期app的软件客服如何联系？不知道吗？加qq群【895510560】即可！标题：六六分期

阅读：19080|2023-10-27

2 可心卡盟:win10系统火狐flash插件崩溃怎么

今天小编告诉大家如何处理win10系统火狐flash插件总是崩溃的问题，可能很多用户都不知

阅读：9958|2022-11-06

3 亲亲特价:怎么删除回收站图标

今天小编告诉大家如何对win10系统删除桌面回收站图标进行设置，可能很多用户都不知道

阅读：8312|2022-11-06

4 济南大学虚拟社区:鲁大师节能降温的具体办

今天小编告诉大家如何对win10系统电脑设置节能降温的设置方法，想必大家都遇到过需要

阅读：8682|2022-11-06

5 xlueops.exe:无线网络安装向导

我们在使用xp系统的过程中,经常需要对xp系统无线网络安装向导设置进行设置，可能很多

阅读：8620|2022-11-06

6 女斗合众国:win7系统cf与主机连接不稳定怎

今天小编告诉大家如何处理win7系统玩cf老是与主机连接不稳定的问题，可能很多用户都不

阅读：9634|2022-11-06

7 0xc000022-[cf烟雾头]cf怎么调烟雾头

电脑对日常生活的重要性小编就不多说了，可是一旦碰到win7系统设置cf烟雾头的问题，很

阅读：8605|2022-11-06

8 qizideyouhuo:应用程序无法正常启动0xc0000

我们在日常使用电脑的时候，有的小伙伴们可能在打开应用的时候会遇见提示应用程序无法

阅读：7985|2022-11-06

9 ipz-185:win7系统vcf文件怎么打开

今天小编告诉大家如何对win7系统打开vcf文件进行设置，可能很多用户都不知道怎么对win

阅读：8631|2022-11-06

10 傻哥蹦迪:win10系统s4怎么打开usb调试

今天小编告诉大家如何对win10系统s4开启USB调试模式进行设置，可能很多用户都不知道怎

阅读：7524|2022-11-06

客服电话

电子邮件

CVE-2022-30024

Current Description

Analysis Description

Severity

References to Advisories, Solutions, and Tools

Weakness Enumeration

Known Affected Software Configurations Switch to CPE 2.2

CPEs loading, please wait.

Change History

Initial Analysis 7/20/2022 9:41:10 PM

请发表评论

全部评论

上一篇：

下一篇：

librespeed/speedtest: Self-hosted Speedt

CVE-2014-1926

avehtari/BDA_m_demos: Bayesian Data Anal

四维彩超怎么看性别？四维看男孩女孩诀窍

yaozeliang/Library: Django

剪的笔顺,诠释剪的笔画,认识剪的部首

六六分期app的软件客服如何联系？(六六分期

florent37/ViewAnimator: A fluent Android

florent37/Shrine-MaterialDesign2: implem

CVE-2020-36276

SimpleSoftwareIO/simple-sms: Send and re

关于我们

产品与服务

解决方案

139-2527-9053