Severity
High
Analysis Summary
CVE-2023-27346
TP-Link AX1800 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking when parsing firmware images. By sending a specially-crafted request, a remote attacker within the local network could overflow a buffer and execute arbitrary code on the system with root privileges.
Impact
- Buffer Overflow
Indicators Of Compromise
CVE
- CVE-2023-27346
Affected Vendors
TP-Link
Affected Products
- TP-Link AX1800
Remediation
Upgrade to the latest version of TP-Link AX1800 firmware, available from the TP-Link Website.