critical9.8
CVE-2022-4498
In TP-Link routers, Archer C5 and WR710N-V1, running the latest available code, when receiving HTTP Basic Authentication the httpd service can be sent a crafte…
Impact
In TP-Link routers, Archer C5 and WR710N-V1, running the latest available code, when receiving HTTP Basic Authentication the httpd service can be sent a crafted packet that causes a heap overflow. This can result in either a DoS (by crashing the httpd process) or an arbitrary code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tp-Link | Archer C5 Firmware | Version 2_160201_us |
| Tp-Link | Tl-Wr710n Firmware | Version 1_151022_us |