2 lines
4.6 KiB
JSON
2 lines
4.6 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","platforms":["Linux"],"product":"TL-WR841N v14","vendor":"TP-Link Systems Inc.","versions":[{"lessThan":"0.9.1 4.19","status":"affected","version":"0","versionType":"custom"}]}],"source":"f23511db-6c3e-4e32-a477-6aa17d310630"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:tp-link:tl-wr841n_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"B8FFCB9A-B16E-496A-A213-2886E262CFDC","versionEndExcluding":"0.9.1_4.19","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:tp-link:tl-wr841n:14:*:*:*:*:*:*:*","matchCriteriaId":"D74FA034-63F6-4F9E-BC24-364B94732E29","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The vulnerability exists in the UPnP component of TL-WR841N v14, where improper input validation leads to an out-of-bounds read, potentially causing a crash of the UPnP service. \n\nSuccessful exploitation can cause the UPnP service to crash, resulting in a Denial-of-Service condition. \nThis vulnerability affects TL-WR841N v14 < EN_0.9.1 4.19 Build 260303 Rel.42399n (V14_260303) and < US_0.9.1.4.19 Build 260312 Rel. 49108n (V14_0304)."},{"lang":"es","value":"La vulnerabilidad existe en el componente UPnP del TL-WR841N v14, donde una validación de entrada incorrecta conduce a una lectura fuera de límites, lo que podría causar una caída del servicio UPnP.\n\nUna explotación exitosa puede provocar la caída del servicio UPnP, lo que resulta en una condición de Denegación de Servicio.\nEsta vulnerabilidad afecta a TL-WR841N v14 < EN_0.9.1 4.19 Build 260303 Rel.42399n (V14_260303) y < US_0.9.1.4.19 Build 260312 Rel. 49108n (V14_0304)."}],"id":"CVE-2026-3622","lastModified":"2026-06-17T10:43:53.260","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"ADJACENT","availabilityRequirement":"NOT_DEFINED","baseScore":7.1,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"f23511db-6c3e-4e32-a477-6aa17d310630","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-3622","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-03-27T19:28:42.478378Z","version":"2.0.3"}}]},"published":"2026-03-26T21:17:09.697","references":[{"source":"f23511db-6c3e-4e32-a477-6aa17d310630","tags":["Product"],"url":"https://www.tp-link.com/en/support/download/tl-wr841n/v14/#Firmware"},{"source":"f23511db-6c3e-4e32-a477-6aa17d310630","tags":["Product"],"url":"https://www.tp-link.com/us/support/download/tl-wr841n/v14/#Firmware"},{"source":"f23511db-6c3e-4e32-a477-6aa17d310630","tags":["Vendor Advisory"],"url":"https://www.tp-link.com/us/support/faq/5033/"}],"sourceIdentifier":"f23511db-6c3e-4e32-a477-6aa17d310630","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-125"}],"source":"f23511db-6c3e-4e32-a477-6aa17d310630","type":"Secondary"}]}
|