TP-Link TL-WR940N V4 Buffer Overflow Vulnerability in WanSlaacCfgRpm.htm

A critical buffer overflow vulnerability has been identified in the TP-Link TL-WR940N V4 router. The issue arises in the file '/userRpm/WanSlaacCfgRpm.htm', where the 'dnsserver1' parameter can be manipulated, leading to a buffer overflow. This vulnerability can be exploited remotely, causing a denial-of-service condition by crashing the router and making it inaccessible.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the router to crash and become unresponsive.

Reproduction

The vulnerability can be reproduced by sending a crafted packet that manipulates the 'dnsserver1' parameter in the '/userRpm/WanSlaacCfgRpm.htm' file. This can be done remotely, and the router will crash as a result.