CVE-2023-39745 - Vulnerability Details - OpenCVE

TP-Link TL-WR940N V2, TP-Link TL-WR941ND V5 and TP-Link TL-WR841N V8 were discovered to contain a buffer overflow via the component /userRpm/AccessCtrlAccessRulesRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

Vendors	Products
Tp-link	Tl-wr841n Tl-wr841n V8 Tl-wr841n V8 Firmware Tl-wr940n V2 Tl-wr940n V2 Firmware Tl-wr941nd Tl-wr941nd V2 Tl-wr941nd V5 Tl-wr941nd V5 Firmware

Configuration 1 [-]

AND

cpe:2.3:o:tp-link:tl-wr940n_v2_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-wr940n_v2:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:tp-link:tl-wr941nd_v5_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-wr941nd_v5:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:tp-link:tl-wr841n_v8_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-wr841n_v8:-:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/16/TP-Link%20WR940N%20WR941ND%20WR841N%20wireless%20router%20userRpmAccessCtrlAccessRulesRpm%20buffer%20read%20out-of-bounds%20vulnerability.md

History

Mon, 07 Oct 2024 19:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Tp-link tl-wr841n Tp-link tl-wr941nd Tp-link tl-wr941nd V2
CPEs		cpe:2.3:h:tp-link:tl-wr841n:8.0:::::::* cpe:2.3:h:tp-link:tl-wr941nd:v5:::::::* cpe:2.3:h:tp-link:tl-wr941nd_v2:-:::::::*
Vendors & Products		Tp-link tl-wr841n Tp-link tl-wr941nd Tp-link tl-wr941nd V2
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2023-08-21T00:00:00

Updated: 2024-10-07T16:38:53.476Z

Reserved: 2023-08-07T00:00:00

Link: CVE-2023-39745

Vulnrichment

Updated: 2024-08-02T18:18:09.966Z

NVD

Status : Modified

Published: 2023-08-21T03:15:11.487

Modified: 2024-11-21T08:15:54.753

Link: CVE-2023-39745

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2023-39745", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2024-10-07T16:38:53.476Z", "dateReserved": "2023-08-07T00:00:00", "datePublished": "2023-08-21T00:00:00"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2023-08-21T02:00:50.119701"}, "descriptions": [{"lang": "en", "value": "TP-Link TL-WR940N V2, TP-Link TL-WR941ND V5 and TP-Link TL-WR841N V8 were discovered to contain a buffer overflow via the component /userRpm/AccessCtrlAccessRulesRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/16/TP-Link%20WR940N%20WR941ND%20WR841N%20wireless%20router%20userRpmAccessCtrlAccessRulesRpm%20buffer%20read%20out-of-bounds%20vulnerability.md"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T18:18:09.966Z"}, "title": "CVE Program Container", "references": [{"url": "https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/16/TP-Link%20WR940N%20WR941ND%20WR841N%20wireless%20router%20userRpmAccessCtrlAccessRulesRpm%20buffer%20read%20out-of-bounds%20vulnerability.md", "tags": ["x_transferred"]}]}, {"affected": [{"vendor": "tp-link", "product": "tl-wr941nd_v2", "cpes": ["cpe:2.3:h:tp-link:tl-wr941nd_v2:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "2", "status": "affected"}]}, {"vendor": "tp-link", "product": "tl-wr941nd", "cpes": ["cpe:2.3:h:tp-link:tl-wr941nd:v5:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "v5", "status": "affected"}]}, {"vendor": "tp-link", "product": "tl-wr841n", "cpes": ["cpe:2.3:h:tp-link:tl-wr841n:8.0:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "8.0", "status": "affected"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-10-07T16:34:40.595695Z", "id": "CVE-2023-39745", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-07T16:38:53.476Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/16/TP-Link%20WR940N%20WR941ND%20WR841N%20wireless%20router%20userRpmAccessCtrlAccessRulesRpm%20buffer%20read%20out-of-bounds%20vulnerability.md", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T18:18:09.966Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-39745", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-10-07T16:34:40.595695Z"}}}], "affected": [{"cpes": ["cpe:2.3:h:tp-link:tl-wr941nd_v2:-:*:*:*:*:*:*:*"], "vendor": "tp-link", "product": "tl-wr941nd_v2", "versions": [{"status": "affected", "version": "2"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:tp-link:tl-wr941nd:v5:*:*:*:*:*:*:*"], "vendor": "tp-link", "product": "tl-wr941nd", "versions": [{"status": "affected", "version": "v5"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:tp-link:tl-wr841n:8.0:*:*:*:*:*:*:*"], "vendor": "tp-link", "product": "tl-wr841n", "versions": [{"status": "affected", "version": "8.0"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-07T16:38:36.069Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/16/TP-Link%20WR940N%20WR941ND%20WR841N%20wireless%20router%20userRpmAccessCtrlAccessRulesRpm%20buffer%20read%20out-of-bounds%20vulnerability.md"}], "descriptions": [{"lang": "en", "value": "TP-Link TL-WR940N V2, TP-Link TL-WR941ND V5 and TP-Link TL-WR841N V8 were discovered to contain a buffer overflow via the component /userRpm/AccessCtrlAccessRulesRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2023-08-21T02:00:50.119701"}}}, "cveMetadata": {"cveId": "CVE-2023-39745", "state": "PUBLISHED", "dateUpdated": "2024-10-07T16:38:53.476Z", "dateReserved": "2023-08-07T00:00:00", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2023-08-21T00:00:00", "assignerShortName": "mitre"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:tl-wr940n_v2_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "465D8E81-9D1D-4F1E-8286-A20FA254B28D", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:tl-wr940n_v2:-:*:*:*:*:*:*:*", "matchCriteriaId": "1F279E7C-77BB-419B-97F4-378392560828", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:tl-wr941nd_v5_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "072943A3-C949-4C5B-B5CC-6CC4CD0CCEC1", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:tl-wr941nd_v5:-:*:*:*:*:*:*:*", "matchCriteriaId": "0C3923D0-6ED5-491C-B5CE-9933FF08F63E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:tl-wr841n_v8_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "0CDB9597-BB6D-457D-B609-85A564C3037E", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:tl-wr841n_v8:-:*:*:*:*:*:*:*", "matchCriteriaId": "C92B3785-F0A1-444A-A3D0-3E0ADCE31170", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "TP-Link TL-WR940N V2, TP-Link TL-WR941ND V5 and TP-Link TL-WR841N V8 were discovered to contain a buffer overflow via the component /userRpm/AccessCtrlAccessRulesRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request."}], "id": "CVE-2023-39745", "lastModified": "2024-11-21T08:15:54.753", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-08-21T03:15:11.487", "references": [{"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/16/TP-Link%20WR940N%20WR941ND%20WR841N%20wireless%20router%20userRpmAccessCtrlAccessRulesRpm%20buffer%20read%20out-of-bounds%20vulnerability.md"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/16/TP-Link%20WR940N%20WR941ND%20WR841N%20wireless%20router%20userRpmAccessCtrlAccessRulesRpm%20buffer%20read%20out-of-bounds%20vulnerability.md"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-120"}], "source": "nvd@nist.gov", "type": "Primary"}]}