CVEs-PoC/2018/CVE-2018-16119.md

CVE-2018-16119

Description

Stack-based buffer overflow in the httpd server of TP-Link WR1043nd (Firmware Version 3) allows remote attackers to execute arbitrary code via a malicious MediaServer request to /userRpm/MediaServerFoldersCfgRpm.htm.

POC

Reference

• https://www.secsignal.org/news/exploiting-routers-just-another-tp-link-0day

Github

• https://github.com/0xT11/CVE-POC
• https://github.com/ARPSyndicate/cvemon
• https://github.com/hdbreaker/CVE-2018-16119