Sign-up

ID

VAR-202310-2143


CVE

CVE-2023-46522


DESCRIPTION

TP-LINK device TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin and TL-WDR7660 2.0.30 were discovered to contain a stack overflow via the function deviceInfoRegister.

Trust: 1.0

sources: NVD: CVE-2023-46522

AFFECTED PRODUCTS

vendor:tp linkmodel:tl-wr886nscope:eqversion:3.0.14

Trust: 1.0

sources: NVD: CVE-2023-46522

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2023-46522
value: CRITICAL

Trust: 1.0

134c704f-9b21-4f2e-91b3-4a467353bcc0: CVE-2023-46522
value: HIGH

Trust: 1.0

nvd@nist.gov: CVE-2023-46522
baseSeverity: CRITICAL
baseScore: 9.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 3.9
impactScore: 5.9
version: 3.1

Trust: 1.0

134c704f-9b21-4f2e-91b3-4a467353bcc0: CVE-2023-46522
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: ADJACENT
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 2.8
impactScore: 5.9
version: 3.1

Trust: 1.0

sources: NVD: CVE-2023-46522 // NVD: CVE-2023-46522

PROBLEMTYPE DATA

problemtype:CWE-787

Trust: 1.0

sources: NVD: CVE-2023-46522

EXTERNAL IDS

db:NVDid:CVE-2023-46522

Trust: 1.0

sources: NVD: CVE-2023-46522

REFERENCES

url:https://github.com/jianchun-ding/cve-poc-update2/tree/main

Trust: 1.0

url:https://github.com/xyiym/digging/blob/main/tp-link/tl-wr886n/2/1.md

Trust: 1.0

url:https://resource.tp-link.com.cn/pc/doccenter/showdoc?id=1676623713687165

Trust: 1.0

sources: NVD: CVE-2023-46522

SOURCES

db:NVDid:CVE-2023-46522

LAST UPDATE DATE

2024-10-26T23:32:49.889000+00:00


SOURCES UPDATE DATE

db:NVDid:CVE-2023-46522date:2024-10-25T17:15:03.790

SOURCES RELEASE DATE

db:NVDid:CVE-2023-46522date:2023-10-25T18:17:38.147