TP-Link Archer AX53 Heap-Based Buffer Overflow Vulnerability Allowing Arbitrary Code Execution
Vulnerability
A heap-based buffer overflow vulnerability has been identified in the TP-Link Archer AX53 v1.0, specifically within the tmpserver modules. This vulnerability allows authenticated adjacent attackers to cause a segmentation fault or potentially execute arbitrary code. The issue arises when a specially crafted network packet is sent, containing a field whose length exceeds the maximum expected value. This vulnerability affects Archer AX53 v1.0 versions through 1.3.1 Build 20241120.
Impact
Exploitation of this vulnerability can lead to a segmentation fault or arbitrary code execution on the affected device.
Remediation
Users are advised to update to the latest firmware version. The latest firmware can be downloaded from the TP-Link official website or the TP-Link Malaysia website.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.