In TP-Link routers, Archer C5 and WR710N-V1, running the latest available code, when receiving HTTP Basic Authentication the httpd service can be sent a crafted packet that causes a heap overflow. This can result in either a DoS (by crashing the httpd process) or an arbitrary code execution.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
tp-link archer_c5_firmware 2_160201_us |
||
tp-link tl-wr710n_firmware 1_151022_us |
Vulmon