What’s Vulnerable › Vulnerabilities

CVE-2021-29302

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-04-12 · updated 2026-06-17
• Weakness: CWE-120

Description

TP-Link TL-WR802N(US), Archer_C50v5_US v4_200 <= 2020.06 contains a buffer overflow vulnerability in the httpd process in the body message. The attack vector is: The attacker can get shell of the router by sending a message through the network, which may lead to remote code execution.

Affected products

• TP-LINK TL-WR802N V4(JP): through 2020.06

References

• https://github.com/liyansong2018/CVE/tree/main/2021/CVE-2021-29302
• https://static.tp-link.com/beta/2021/202103/20210319/TL-WR802Nv4_US_0.9.1_3.17_up_boot%5B210317-rel64474%5D.zip
• https://www.tp-link.com/us/support/download/tl-wr802n/#Firmware
• https://github.com/liyansong2018/CVE/tree/main/2021/CVE-2021-29302
• https://static.tp-link.com/beta/2021/202103/20210319/TL-WR802Nv4_US_0.9.1_3.17_up_boot%5B210317-rel64474%5D.zip
• https://www.tp-link.com/us/support/download/tl-wr802n/#Firmware

Get alerted when CVE-2021-29302 or the next vulnerability affects your stack