Severity
High
Analysis Summary
CVE-2021-29302
TP-Link TL-WR802N(US) and Archer_C50v5_US devices are vulnerable to a buffer overflow, caused by improper bounds checking by the httpd process in the body message. By sending a specially-crafted message, a remote attacker could overflow a buffer and execute arbitrary code on the system.
Impact
Execution of arbitrary code
Affected Vendors
- TP Link
- Archer
Affected Products
- TP-Link TL-WR802N(US) V4_200
- TP-Link Archer_C50v5_US V4_200
Remediation
Upgrade to the latest version of TL-WR802N(US) and Archer_C50v5_US, available from the TP-Link Web site.