CVE-2019-13614: tp-link archer_c1200_firmware Out-of-bounds Write
Vulnerability summary
CVE-2019-13614 is a critical (CVSS 9.8) Out-of-bounds Write vulnerability in tp-link archer_c1200_firmware. EPSS estimates a 3.43% chance of exploitation in the next 30 days, higher than 88.8% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 17-07-2019PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
CMD_SET_CONFIG_COUNTRY in the TP-Link Device Debug protocol in TP-Link Archer C1200 1.0.0 Build 20180502 rel.45702 and earlier is prone to a stack-based buffer overflow, which allows a remote attacker to achieve code execution or denial of service by sending a crafted payload to the listening server.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
3.43%
Chance of exploitation in the next 30 days
Percentile
89%
Versus all other CVEs
30-day change
+0.16 pp
From 3.27% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (fakhrizulkifli.github.io)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Tp-link1 product
- archer_c1200_firmware1.0.0:170413 | 1.0.0:180103 | 1.0.0:180123 | 1.0.0:20180502
1 vendor · 1 product
References
1 links- fakhrizulkifli.github.io/posts/2019/07/15/CVE-2019-13614/X Refsource MISCExploitThird Party Advisory