CVE-2020-28877
Critical
Description
Buffer overflow in in the copy_msg_element function for the devDiscoverHandle server in the TP-Link WR and WDR series, including WDR7400, WDR7500, WDR7660, WDR7800, WDR8400, WDR8500, WDR8600, WDR8620, WDR8640, WDR8660, WR880N, WR886N, WR890N, WR890N, WR882N, and WR708N.
SeverityCritical
CVSS9.8
Exploit probability—
Product
Tp-link Wdr7400 Firmware
PublishedNov 20, 2020
First seenNov 20, 2020
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tp-link wdr7400_firmware | No range specified | — |
| tp-link wdr7500_firmware | No range specified | — |
| tp-link wdr7660_firmware | No range specified | — |
| tp-link wdr7800_firmware | No range specified | — |
| tp-link wdr8400_firmware | No range specified | — |
| tp-link wdr8500_firmware | No range specified | — |
| tp-link wdr8600_firmware | No range specified | — |
| tp-link wdr8620_firmware | No range specified | — |
| tp-link wdr8640_firmware | No range specified | — |
| tp-link wdr8660_firmware | No range specified | — |
| tp-link wr880n_firmware | No range specified | — |
| tp-link wr886n_firmware | No range specified | — |
| tp-link wr890n_firmware | No range specified | — |
| tp-link wr882n_firmware | No range specified | — |
| tp-link wr708n_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.