cve/2020/CVE-2020-28005.md

### [CVE-2020-28005](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28005)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

httpd on TP-Link TL-WPA4220 devices (hardware versions 2 through 4) allows remote authenticated users to trigger a buffer overflow (causing a denial of service) by sending a POST request to the /admin/syslog endpoint. Fixed version: TL-WPA4220(EU)_V4_201023

### POC

#### Reference
- https://the-hyperbolic.com/posts/vulnerabilities-in-tlwpa4220/
- https://the-hyperbolic.com/posts/vulnerabilities-in-tlwpa4220/

#### Github
No PoCs found on GitHub currently.