CVE-2022-0650: tp-link tl-wr940n_firmware Stack-based Buffer Overflow
Vulnerability summary
CVE-2022-0650 is a high (CVSS 8.0) Stack-based Buffer Overflow vulnerability in tp-link tl-wr940n_firmware. EPSS estimates a 0.72% chance of exploitation in the next 30 days, higher than 53.2% of scored vulnerabilities.
Timeline
- 28-03-2023PublishedVulnerability first disclosed.
- 19-02-2025Last modifiedVulnerability information updated.
Description
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n (5553) routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-13993.
CVSS metrics
3 scores · 2 sources · 2 versions- NVDNIST6.8MediumCVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.72%
Chance of exploitation in the next 30 days
Percentile
53%
Versus all other CVEs
30-day change
0.00 pp
From 0.72% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-121Stack-based Buffer OverflowA stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
- CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.
Affected systems
Tp-link1 product
- tl-wr940n_firmware3.20.1 Build 200316 Rel.34392n (5553) | < 211111
1 vendor · 1 product