CVE-2024-54887
HighCVSS 8.0Exploitation Probability (EPSS)
Very high risk92th percentile - higher than 92% of all known CVEs
Summary
A buffer overflow vulnerability exists in TP-Link TL-WR940N V3 and V4 routers with firmware 3.16.9 and earlier, via the dnsserver1 and dnsserver2 parameters at /userRpm/Wan6to4TunnelCfgRpm.htm. An authenticated attacker can execute arbitrary code on the device with root privileges.
Risk Assessment
An attacker can gain full control over the router, compromising network confidentiality and integrity, and enabling further attacks on local network devices.
Recommendation
Immediately update the router firmware to the latest version and restrict administrative panel access to trusted IP addresses only.
Original NVD description (English source)
TP-Link TL-WR940N V3 and V4 with firmware 3.16.9 and earlier contain a buffer overflow via the dnsserver1 and dnsserver2 parameters at /userRpm/Wan6to4TunnelCfgRpm.htm. This vulnerability allows an authenticated attacker to execute arbitrary code on the remote device in the context of the root user.