Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

TP-Link TL-WR940N: Analysis of a 1day (CVE-2022-24355) Buffer Overflow RCE Vulnerability

blog.viettelcybersecurity.com | vulnerability | CVE-2022-24355 | #rce

Summary

About the bug CVE-2022-24355 allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of file name extensions. The issue results from the lack of proper validation of the length of
Published
Collected

original ↗

Related coverage

  1. CVE-2026-33112: SharePoint XmlValidator Bypass Enables Low-Privilege RCE (blog.viettelcybersecurity.com)
  2. CVE-2026-20963 Analysis (blog.viettelcybersecurity.com)
  3. SharePoint ToolShell – One Request PreAuth RCE Chain (blog.viettelcybersecurity.com)
  4. SharePoint Unknown CVE Unveiled: RCE via WebPart Properties Deserialization (blog.viettelcybersecurity.com)
  5. CVE-2022-21587 (Oracle E-Business Suite Unauthenticated RCE) (blog.viettelcybersecurity.com)
  6. NETGEAR R6700v3: 1day Analysis (CVE-2021-34982) Buffer Overflow RCE Vulnerability (blog.viettelcybersecurity.com)

back