← Database

CVE-2024-42815

CRITICAL CVSS: 9.8 Published: 2024-08-19 Modified: 2026-06-17

Description

In the TP-Link RE365 V1_180213, there is a buffer overflow vulnerability due to the lack of length verification for the USER_AGENT field in /usr/bin/httpd. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands.

Affected Platforms

Tp-Link Re365 FirmwareTp-Link Re365

Weakness Type

CWE-787

References