What’s Vulnerable › Vulnerabilities

CVE-2019-13614

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-07-17 · updated 2026-06-17
• Weakness: CWE-787

Description

CMD_SET_CONFIG_COUNTRY in the TP-Link Device Debug protocol in TP-Link Archer C1200 1.0.0 Build 20180502 rel.45702 and earlier is prone to a stack-based buffer overflow, which allows a remote attacker to achieve code execution or denial of service by sending a crafted payload to the listening server.

Affected products

• TP-Link Archer C1200 Firmware: 1.0.0-170413, 1.0.0-180103, 1.0.0-180123, 1.0.0-20180502

References

• https://fakhrizulkifli.github.io/posts/2019/07/15/CVE-2019-13614/
• https://fakhrizulkifli.github.io/posts/2019/07/15/CVE-2019-13614/

Get alerted when CVE-2019-13614 or the next vulnerability affects your stack