TP-Link Archer C1200 stack-based buffer overflow vulnerability [CVE-2019-13614]

CVE Number – CVE-2019-13614

CMD_SET_CONFIG_COUNTRY in the TP-Link Device Debug protocol in TP-Link Archer C1200 1.0.0 Build 20180502 rel.45702 and earlier is prone to a stack-based buffer overflow, which allows a remote attacker to achieve code execution or denial of service by sending a crafted payload to the listening server.

Proof-of-Concept – https://fakhrizulkifli.github.io/posts/2019/07/15/CVE-2019-13614/

Please check TP-Link website for any future fix’s.

Jason Davies

UK based technology professional, with an interest in computer security and telecoms.

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

%d bloggers like this: