Vulnerability Details CVE-2019-6989
TP-Link TL-WR940N is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the ipAddrDispose function. By sending specially crafted ICMP echo request packets, a remote authenticated attacker could overflow a buffer and execute arbitrary code on the system with elevated privileges.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.199
EPSS Ranking 95.2%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 9.0
References
Products affected by CVE-2019-6989
-
cpe:2.3:h:tp-link:tl-wr940n:-
-
cpe:2.3:h:tp-link:tl-wr941nd:-
-
cpe:2.3:o:tp-link:tl-wr940n_firmware:-
-
cpe:2.3:o:tp-link:tl-wr941nd_firmware:-