CVE-2019-6989

TP-Link TL-WR940N is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the ipAddrDispose function. By sending specially crafted ICMP echo request packets, a remote authenticated attacker could overflow a buffer and execute arbitrary code on the system with elevated privileges.

CVSS v3.0

8.8 HIGHCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

9.0 HIGHAV:N/AC:L/Au:S/C:C/I:C/A:C

EPSS

11.58% chance of exploitation in the next 30 days, 96th percentile

Published

2019-06-06

Updated

2024-08-04

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/46678

References

• CVE Record
• NVD entry

Related

• CVE-2019-6988
• CVE-2019-6991
• CVE-2019-6979
• CVE-2019-7004
• CVE-2019-6977
• CVE-2019-7069