CVE-2017-13772

Severity: high (CVSS 8.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 51.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2017-10-23 · updated 2026-06-17
Weakness: CWE-119

Description

Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated users to execute arbitrary code via the (1) ping_addr parameter to PingIframeRpm.htm or (2) dnsserver2 parameter to WanStaticIpV6CfgRpm.htm.

Affected products

TP-Link Wr940N Firmware: all versions

References

http://packetstormsecurity.com/files/158999/TP-Link-WDR4300-Remote-Code-Execution.html
https://www.exploit-db.com/exploits/43022/
https://www.fidusinfosec.com/tp-link-remote-code-execution-cve-2017-13772/
http://packetstormsecurity.com/files/158999/TP-Link-WDR4300-Remote-Code-Execution.html
https://www.exploit-db.com/exploits/43022/
https://www.fidusinfosec.com/tp-link-remote-code-execution-cve-2017-13772/

Get alerted when CVE-2017-13772 or the next vulnerability affects your stack