ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2020-28877

—
CVSS 3.1
9.8 critical
EPSS
1%p66
Published
()
Modified
Description

Buffer overflow in in the copy_msg_element function for the devDiscoverHandle server in the TP-Link WR and WDR series, including WDR7400, WDR7500, WDR7660, WDR7800, WDR8400, WDR8500, WDR8600, WDR8620, WDR8640, WDR8660, WR880N, WR886N, WR890N, WR890N, WR882N, and WR708N.

Vendors
tp-link
Products
wdr7400 firmware, wdr7500 firmware, wdr7660 firmware, wdr7800 firmware, wdr8400 firmware, wdr8500 firmware, wdr8600 firmware, wdr8620 firmware, wdr8640 firmware, wdr8660 firmware, wr880n firmware, wr886n firmware
Weakness
CWE-120
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news

No ingested article mentions this CVE yet.