TP-Link Archer AX53 Heap-Based Buffer Overflow Vulnerability Allowing Arbitrary Code Execution
Vulnerability
A heap-based buffer overflow vulnerability has been identified in the TP-Link Archer AX53 v1.0, specifically within the tmpserver modules. This vulnerability allows authenticated adjacent attackers to cause a segmentation fault or potentially execute arbitrary code. The issue arises from network packets that are crafted to include an excessive number of fields with zero-length values, exceeding the expected limits. This vulnerability affects Archer AX53 v1.0 versions through 1.3.1 Build 20241120.
Impact
Exploitation of this vulnerability can lead to a segmentation fault or arbitrary code execution on the affected device.
Remediation
Users are advised to update to the latest firmware version. The latest firmware for the Archer AX53 v1.0 can be downloaded from the TP-Link official website.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.