CVE-2023-36355
CriticalCVSS 9.9Exploitation Probability (EPSS)
Very high risk97th percentile - higher than 97% of all known CVEs
Summary
A buffer overflow vulnerability was discovered in TP-Link TL-WR940N V4 via the ipStart parameter at /userRpm/WanDynamicIpV6CfgRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request.
Risk Assessment
The organization may experience service outages, leading to disruptions in operations and loss of user trust.
Recommendation
It is recommended to update the device firmware to the latest version to mitigate this vulnerability and to monitor network traffic for potential attacks.
Original NVD description (English source)
TP-Link TL-WR940N V4 was discovered to contain a buffer overflow via the ipStart parameter at /userRpm/WanDynamicIpV6CfgRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request.