TP-Link TL-WR841N ated_tp Command Injection Remote Code Execution Vulnerability
November 14th, 2023
Vulnerability Details
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the ated_tp service. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root.
Additional Details
Fixed in firmware:
TL-WR841N(US)_V14_231119:
https://www.tp-link.com/us/support/download/tl-wr841n/v14/#Firmware
TL-WR840N(KR)_V6.20_231121:
https://www.tp-link.com/kr/support/download/tl-wr840n/#Firmware
Disclosure Timeline
- 2023-08-29 - Vulnerability reported to vendor
- 2023-11-14 - Coordinated public release of advisory
- 2023-12-05 - Advisory Updated
Credit
Theori
