cve/2022/CVE-2022-4498.md
2024-05-25 21:48:12 +02:00

1.1 KiB

CVE-2022-4498

Description

In TP-Link routers, Archer C5 and WR710N-V1, running the latest available code, when receiving HTTP Basic Authentication the httpd service can be sent a crafted packet that causes a heap overflow. This can result in either a DoS (by crashing the httpd process) or an arbitrary code execution.

POC

Reference

No PoCs from references.

Github