CVE-2023-34832
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk68th percentile - higher than 68% of all known CVEs
Summary
A buffer overflow vulnerability was discovered in the TP-Link Archer AX10 (EU) router firmware version V1.2_230220, specifically in the function FUN_131e8 - 0x132B4. This could allow an attacker to execute arbitrary code or cause a denial of service.
Risk Assessment
The risk involves potential remote code execution on the router, which could compromise the security of the home or small business network, enable traffic interception, or facilitate further attacks.
Recommendation
It is recommended to immediately update the TP-Link Archer AX10 router firmware to the latest available version that addresses this vulnerability. If no update is available, restrict administrative access to trusted networks only.
Original NVD description (English source)
TP-Link Archer AX10(EU)_V1.2_230220 was discovered to contain a buffer overflow via the function FUN_131e8 - 0x132B4.