← back
CVE-2019-6989

CVE-2019-6989

EPSS 11.6%
TP-Link TL-WR940N is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the ipAddrDispose function. By sending specially crafted ICMP echo request packets, a remote authenticated attacker could overflow a buffer and execute arbitrary code on the system with elevated privileges.
Affected products
n/a · n/a
public PoCs found — 3
cve_referencepacketstormsecurity.com/files/152458/TP-LINK-TL-WR940N-TL-WR941ND-Buffer-Overflow.htmlunverifiedcve_referencewww.exploit-db.com/exploits/46678/unverifiedexploitdbwww.exploit-db.com/exploits/46678unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://packetstormsecurity.com/files/152458/TP-LINK-TL-WR940N-TL-WR941ND-Buffer-Overflow.htmlhttps://www.exploit-db.com/exploits/46678/