Analysis Summary

CVE-2024-48712 CVSS:6.5

In TP-Link TL-WDR7660 1.0, the rtRuleJsonToBin function handles the parameter string name without checking it, which can lead to stack overflow vulnerabilities.

CVE-2024-48710 CVSS:6.5

In TP-Link TL-WDR7660 1.0, the wlanTimerRuleJsonToBin function handles the parameter string name without checking it, which can lead to stack overflow vulnerabilities.

CVE-2024-48713 CVSS:6.5

In TP-Link TL-WDR7660 1.0, the wacWhitelistJsonToBin function handles the parameter string name without checking it, which can lead to stack overflow vulnerabilities.

CVE-2024-48714 CVSS:6.5

In TP-Link TL-WDR7660 v1.0, the guestRuleJsonToBin function handles the parameter string name without checking it, which can lead to stack overflow vulnerabilities.

Impact

• Buffer Overflow

Indicators of Compromise

CVE

• CVE-2024-48712
• CVE-2024-48710
• CVE-2024-48713
• CVE-2024-48714

Affected Vendors

Affected Products

• TP-Link TL-WDR7660 1.0

Remediation

Refer to TP-Link Security Advisory for patch, upgrade, or suggested workaround information.

CVE-2024-48712

CVE-2024-48710

CVE-2024-48713

CVE-2024-48714