A vulnerability, which was classified as critical, was found in TP-LINK Archer C3200 V1 and Archer C2 V1 (the affected version unknown). Affected is an unknown part of the component DHCP Handler. The manipulation with an unknown input leads to a input validation vulnerability. CWE is classifying the issue as CWE-20. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

TP-Link Archer C3200 V1 and Archer C2 V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. A DHCP Request is sent to the router with a certain Transaction ID field. Following the DHCP protocol, the router responds with an ACK or NAK message. Studying the NAK case revealed that the router erroneously sends the NAK to both Host and Guest networks with the same Transaction ID as found in the DHCP Request. This allows encoding of data to be sent cross-router into the 32-bit Transaction ID field.

The weakness was shared 08/27/2019. This vulnerability is traded as CVE-2019-13266 since 07/04/2019. The attack needs to be done within the local network. The exploitation doesn't require any form of authentication. The technical details are unknown and an exploit is not available.

It is possible to mitigate the weakness by firewalling .

The entries 140936 and 140935 are related to this item.

Productinfo

Vendor

• TP-LINK

Name

• Archer C2 V1
• Archer C3200 V1

License

• commercial

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion