CVE-2022-24353
published 2023-03-28CVE-2022-24353: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1750 1.1.4 Build 20211022 rel.59103(5553)…
PriorityP354high8.8CVSS 3.1
AVAACLPRNUINSUCHIHAH
EPSS
0.74%
49.9th percentile
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1750 1.1.4 Build 20211022 rel.59103(5553) routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetUSB.ko module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the root user. Was ZDI-CAN-15769.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| tp-link | ac1750 | — | — |
| tp-link | ac1750_firmware | < 211210 | 211210 |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv3.08.8HIGHCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
TP-Link AC1750 1.1.4 Build 20211022 rel.59103(5553) NetUSB.ko out-of-bounds (ZDI-22-263 / EUVD-2022-29249)
vuldb·2026-05-03·CVSS 8.8
CVE-2022-24353 [HIGH] TP-Link AC1750 1.1.4 Build 20211022 rel.59103(5553) NetUSB.ko out-of-bounds (ZDI-22-263 / EUVD-2022-29249)
A vulnerability was found in TP-Link AC1750 1.1.4 Build 20211022 rel.59103(5553). It has been declared as problematic. This vulnerability affects unknown code in the library NetUSB.ko. Such manipulation leads to out-of-bounds read.
This vulnerability is documented as CVE-2022-24353. The attack requires being on the local network. There is not any exploit available.
GHSA
GHSA-52gc-5pjh-wc34: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1750 1
ghsa_unreviewed·2023-03-28
CVE-2022-24353 [HIGH] CWE-125 GHSA-52gc-5pjh-wc34: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1750 1
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1750 1.1.4 Build 20211022 rel.59103(5553) routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetUSB.ko module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the root user. Was ZDI-CAN-15769.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-03-28
Published