CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2020-28877
Buffer overflow in in the copy_msg_element function for the devDiscoverHandle server in the TP-Link WR and WDR series, including WDR7400, WDR7500, WDR7660, WDR7800, WDR8400, WDR8500, WDR8600, WDR8620, WDR8640, WDR8660, WR880N, WR886N, WR890N, WR890N, WR882N, and WR708N.
Severity
- EPSS
- 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
- CWE
- CWE-120
- Published
- Modified
- Record from
- the NVD, synced
Affected
- tp-link:wdr7400_firmware
- tp-link:wdr7500_firmware
- tp-link:wdr7660_firmware
- tp-link:wdr7800_firmware
- tp-link:wdr8400_firmware
- tp-link:wdr8500_firmware
- tp-link:wdr8600_firmware
- tp-link:wdr8620_firmware
- tp-link:wdr8640_firmware
- tp-link:wdr8660_firmware
- tp-link:wr708n_firmware
- tp-link:wr880n_firmware
- tp-link:wr882n_firmware
- tp-link:wr886n_firmware
- tp-link:wr890n_firmware