CVE Number – CVE-2019-13614
CMD_SET_CONFIG_COUNTRY in the TP-Link Device Debug protocol in TP-Link Archer C1200 1.0.0 Build 20180502 rel.45702 and earlier is prone to a stack-based buffer overflow, which allows a remote attacker to achieve code execution or denial of service by sending a crafted payload to the listening server.
Proof-of-Concept – https://fakhrizulkifli.github.io/posts/2019/07/15/CVE-2019-13614/
Please check TP-Link website for any future fix’s.
UK based technology professional, with an interest in computer security and telecoms.