Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2023-46527: TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin and TL-WDR7660 2.0.30 was discovered to contain a stack overflow via the function bindRequestHandle.

CVE-2023-46527 · published 3 years ago

Summary

TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin and TL-WDR7660 2.0.30 was discovered to contain a stack overflow via the function bindRequestHandle.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
tp-link	tl-wr886n_firmware	3.0.14 `cpe:2.3:o:tp-link:tl-wr886n_firmware:3.0.14:::::::*`

Original advisory text

TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin and TL-WDR7660 2.0.30 was discovered to contain a stack overflow via the function bindRequestHandle.

References

https://github.com/Jianchun-Ding/CVE-poc-update
https://github.com/XYIYM/Digging/blob/main/TP-LINK/TL-WR886N/13/1.md Exploit Third Party Advisory
https://resource.tp-link.com.cn/pc/docCenter/showDoc?id=1676623713687165 Product

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

9.8 Critical

Exploitation

2% chance of attack within 30 days

Type

CWE-787Out-of-bounds Write

Timeline

Published25 Oct 2023

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2023-46527 · NVD

Track software like this

Free during beta