CVE-2020-28005
MEDIUM 6.5EPSS 1.8%
httpd on TP-Link TL-WPA4220 devices (hardware versions 2 through 4) allows remote authenticated users to trigger a buffer overflow (causing a denial of service) by sending a POST request to the /admin/syslog endpoint. Fixed version: TL-WPA4220(EU)_V4_201023
- CVSS v3.1
- 6.5 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - CVSS v2.0
- 3.5 LOW
AV:N/AC:M/Au:S/C:N/I:N/A:P - EPSS
- 1.81% chance of exploitation in the next 30 days, 77th percentile
- Published
- 2020-11-18
- Updated
- 2024-08-04