CVE-2023-39747

Summary

CVE-2023-39747 is a newly disclosed buffer overflow vulnerability affecting select TP-Link routers, specifically the WR841N V8, TL-WR940N V2, and TL-WR941ND V5 models. The issue lies within the handling of the radiusSecret parameter in the /userRpm/WlanSecurityRpm section, which can result in excess data being written to a buffer. This vulnerability may lead to remote code execution or denial-of-service attacks, posing a significant threat to network security. Users are advised to update their router firmware as soon as patches become available to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.