CVE Feed

    Dashboard / CVE / CVE-2024-42815

    CVE-2024-42815

    In the TP-Link RE365 V1_180213, there is a buffer overflow vulnerability due to the lack of length verification for the USER_AGENT field in /usr/bin/httpd. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands.

    Published:Aug 19, 2024
    Last Modified:Jul 9, 2025
    EPS:Aug 19, 2024
    EPSS Score:0.00571
    CVSS Score:9.8

    Affected Products

    Vendor
    Tp-link
    Product
    Re365
    Vendor
    Tp-link
    Product
    Re365 Firmware

    Exploits

    https://gist.github.com/XiaoCurry/14d46e0becd79d9bb9907f2fbe147cfe

    Common Weakness Enumeration

    CWE-787 Out-of-bounds Write

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High