high8.8Public exploit code
CVE-2019-6989
TP-Link TL-WR940N is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the ipAddrDispose function.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- TP-LINK TL-WR940N / TL-WR941ND - Buffer Overflow2019-04-09 · remote · hardware
Impact
TP-Link TL-WR940N is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the ipAddrDispose function. By sending specially crafted ICMP echo request packets, a remote authenticated attacker could overflow a buffer and execute arbitrary code on the system with elevated privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tp-Link | Tl-Wr940n Firmware | All versions |
| Tp-Link | Tl-Wr941nd Firmware | All versions |