CVE-2018-17004
UnknownEPSS 1.04%
Last modified
CVE-2018-17004 is a vulnerability of currently unknown severity. An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for wlan_access name.. EPSS estimates a 1.04% chance of exploitation in the next 30 days.
Description
An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for wlan_access name.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Tp-Link | Tl-Wr886n Firmware | 6.0_2.3.4 |
| Tp-Link | Tl-Wr886n Firmware | 7.0_1.1.0 |
References
- https://github.com/PAGalaxyLab/VulInfo/blob/master/TP-Link/WR886N/inetd_task_dos_00/README.mdExploit, Third Party Advisory
- https://github.com/PAGalaxyLab/VulInfo/blob/master/TP-Link/WR886N/inetd_task_dos_00/README.mdExploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-17004?
An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for wlan_access name.
How severe is CVE-2018-17004?
Severity scoring for CVE-2018-17004 is pending analysis. The EPSS model estimates a 1.04% probability of exploitation in the next 30 days.
How do I fix CVE-2018-17004?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
Are you affected by CVE-2018-17004?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST