Exploitation Summary
EIP tracks 2 public exploits for CVE-2025-40634. PoCs published by hacefresko.
AI-analyzed exploit summary This repository contains a working exploit for CVE-2025-40634, a stack-based buffer overflow in the TP-Link Archer AX50 router's `conn-indicator` binary, leading to remote code execution. The exploit leverages a crafted DNS response to overflow a buffer in the `DNS_answer_parser` function.
Description
Stack-based buffer overflow vulnerability in the 'conn-indicator' binary running as root on the TP-Link Archer AX50 router, in firmware versions prior to 1.0.15 build 241203 rel61480. This vulnerability allows an attacker to execute arbitrary code on the device over LAN and WAN networks.
Exploits (2)
This repository contains a working exploit for CVE-2025-40634, a stack-based buffer overflow in the TP-Link Archer AX50 router's `conn-indicator` binary, leading to remote code execution. The exploit leverages a crafted DNS response to overflow a buffer in the `DNS_answer_parser` function.
The repository contains a functional exploit for CVE-2025-40634, demonstrating a command injection vulnerability in TP-Link Tapo c200 IP cameras. The exploit leverages insufficient input validation in the `setLanguage` method to achieve unauthenticated remote code execution.
References (1)
Scores
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X