---
id: 7349
title: "1day to 0day(CVE-2022-30024) on TP-Link TL-WR841N"
source_domain: blog.viettelcybersecurity.com
source_url: "https://blog.viettelcybersecurity.com/1day-to-0day-on-tl-link-tl-wr841n/"
published_at: "2022-08-15T03:36:43Z"
tags: ["rce", "zero-day", "buffer-overflow", "router", "firmware-analysis", "tp-link", "cve-2022-30024", "cve-2020-8423"]
phying_url: "https://phying.com/item/7349"
lang: en
---

# 1day to 0day(CVE-2022-30024) on TP-Link TL-WR841N

## Summary

Studying TP-Link TL-WR841N firmware, the author revisits CVE-2020-8423 and finds 0-day CVE-2022-30024: stringModify() miscounts escaped characters, overflowing a stack buffer via the survey page.

## Intelligence Metadata

- **Sources:** blog.viettelcybersecurity.com
- **Published:** 2022-08-15T03:36:43Z
- **Original:** https://blog.viettelcybersecurity.com/1day-to-0day-on-tl-link-tl-wr841n/
- **Phying News:** https://phying.com/item/7349