ID
VAR-202411-0796
CVE
CVE-2024-11237
TITLE
TP-LINK Technologies of vn020-f3v(t) Out-of-bounds write vulnerability in firmware
Trust: 0.8
DESCRIPTION
A vulnerability, which was classified as critical, has been found in TP-Link VN020 F3v(T) TT_V6.2.1021. Affected by this issue is some unknown functionality of the component DHCP DISCOVER Packet Parser. The manipulation of the argument hostname leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. TP-LINK Technologies of vn020-f3v(t) An out-of-bounds write vulnerability exists in firmware.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. TP-LINK vn020-f3vt is a wireless modem from TP-LINK of China. The vulnerability is caused by the network system or product not properly verifying the data boundary when performing operations on memory, resulting in incorrect read and write operations to other associated memory locations. Attackers can exploit this vulnerability to cause buffer overflow or heap overflow, etc
Trust: 2.16
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | tp link | model: | vn020-f3v\ | scope: | eq | version: | tt_v6.2.1021 | Trust: 1.0 |
| vendor: | tp link | model: | vn020-f3v | scope: | eq | version: | vn020-f3v(t) firmware tt v6.2.1021 | Trust: 0.8 |
| vendor: | tp link | model: | vn020-f3v | scope: | eq | version: | - | Trust: 0.8 |
| vendor: | tp link | model: | vn020-f3v | scope: | - | version: | - | Trust: 0.8 |
| vendor: | tp link | model: | vn020-f3vt tt v6.2.1021 | scope: | - | version: | - | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-787 | Trust: 1.0 |
| problemtype: | CWE-119 | Trust: 1.0 |
| problemtype: | CWE-121 | Trust: 1.0 |
| problemtype: | Buffer error (CWE-119) [ others ] | Trust: 0.8 |
| problemtype: | Stack-based buffer overflow (CWE-121) [ others ] | Trust: 0.8 |
| problemtype: | Out-of-bounds writing (CWE-787) [NVD evaluation ] | Trust: 0.8 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2024-11237 | Trust: 3.2 |
| db: | VULDB | id: | 284672 | Trust: 1.8 |
| db: | JVNDB | id: | JVNDB-2024-013008 | Trust: 0.8 |
| db: | CNVD | id: | CNVD-2024-47283 | Trust: 0.6 |
REFERENCES
| url: | https://github.com/zephkek/tp-thumper | Trust: 1.8 |
| url: | https://github.com/zephkek/tp-thumper/blob/main/poc.c | Trust: 1.8 |
| url: | https://vuldb.com/?id.284672 | Trust: 1.8 |
| url: | https://vuldb.com/?submit.438408 | Trust: 1.8 |
| url: | https://www.tp-link.com/ | Trust: 1.8 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2024-11237 | Trust: 1.4 |
| url: | https://vuldb.com/?ctiid.284672 | Trust: 1.0 |
SOURCES
| db: | CNVD | id: | CNVD-2024-47283 |
| db: | JVNDB | id: | JVNDB-2024-013008 |
| db: | NVD | id: | CVE-2024-11237 |
LAST UPDATE DATE
2024-12-11T23:00:28.153000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2024-47283 | date: | 2024-12-06T00:00:00 |
| db: | JVNDB | id: | JVNDB-2024-013008 | date: | 2024-11-20T00:48:00 |
| db: | NVD | id: | CVE-2024-11237 | date: | 2024-11-19T19:04:14.987 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2024-47283 | date: | 2024-12-05T00:00:00 |
| db: | JVNDB | id: | JVNDB-2024-013008 | date: | 2024-11-20T00:00:00 |
| db: | NVD | id: | CVE-2024-11237 | date: | 2024-11-15T12:15:14.670 |