CVE-2014-9350: tp-link tl-wr740n_firmware Data Processing Errors

Vulnerability summary

CVE-2014-9350 is a medium (CVSS 5.0) Data Processing Errors vulnerability in tp-link tl-wr740n_firmware. EPSS estimates a 7.17% chance of exploitation in the next 30 days, higher than 94.2% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 08-12-2014
   PublishedVulnerability first disclosed.
2. 06-08-2024
   Last modifiedVulnerability information updated.

Description

TP-Link TL-WR740N 4 with firmware 3.17.0 Build 140520, 3.16.6 Build 130529, and 3.16.4 Build 130205 allows remote attackers to cause a denial of service (httpd crash) via vectors involving a "new" value in the isNew parameter to PingIframeRpm.htm.

• CWE-19Data Processing ErrorsWeaknesses in this category are typically found in functionality that processes data. Data processing is the manipulation of input to retrieve or save information.