CVE-2024-54887

HIGH

Tp-link Tl-wr940n Firmware < 3.16.9 - Buffer Overflow

Title source: rule
STIX 2.1

Description

TP-Link TL-WR940N V3 and V4 with firmware 3.16.9 and earlier contain a buffer overflow via the dnsserver1 and dnsserver2 parameters at /userRpm/Wan6to4TunnelCfgRpm.htm. This vulnerability allows an authenticated attacker to execute arbitrary code on the remote device in the context of the root user.

References (2)

Core 2

Scores

CVSS v3 8.0
EPSS 0.0173
EPSS Percentile 82.5%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-120
Status published
Products (1)
tp-link/tl-wr940n_firmware < 3.16.9
Published Jan 09, 2025
Tracked Since Feb 18, 2026