Vulnerability · Published Mar 25, 2020 · Assigned by zdi
CVE-2020-10881
Critical 9.8
In plain English
A critical-severity stack buffer overflow in Archer A7 from TP-Link. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 9.3% (higher than 95% of all known vulnerabilities).
Official description
This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of DNS responses. A crafted DNS message can trigger an overflow of a fixed-length, stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the root user. Was ZDI-CAN-9660.
Affected products (as reported)
Weakness: CWE-121 · Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- https://www.zerodayinitiative.com/advisories/ZDI-20-333/ x_refsource_MISC