CVE-2020-8423 PoC — TP-Link TL-WR841N 缓冲区错误漏洞

Source

https://github.com/lnversed/CVE-2020-8423

Associated Vulnerability

Title:TP-Link TL-WR841N 缓冲区错误漏洞 (CVE-2020-8423)
Description:A buffer overflow in the httpd daemon on TP-Link TL-WR841N V10 (firmware version 3.16.9) devices allows an authenticated remote attacker to execute arbitrary code via a GET request to the page for the configuration of the Wi-Fi network.

Description

Research based on https://ktln2.org/2020/03/29/exploiting-mips-router/#testing-environment

Readme

# CVE-2020-8423
Research based on https://ktln2.org/2020/03/29/exploiting-mips-router/#testing-environment
hook.c is customized (especially open())
vmlinux version 2.6.31

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!