{"id":"CVE-2022-30024","aliases":["EUVD-2022-35239","GHSA-h8v9-4xr4-x4xq"],"status":"published","title":"A buffer overflow in the httpd daemon on TP-Link TL-WR841N V12 (firmware version 3.16.9) devices...","description":"A buffer overflow in the httpd daemon on TP-Link TL-WR841N V12 (firmware version 3.16.9) devices allows an authenticated remote attacker to execute arbitrary code via a GET request to the page for the System Tools of the Wi-Fi network. This affects TL-WR841 V12 TL-WR841N(EU)_V12_160624 and TL-WR841 V11 TL-WR841N(EU)_V11_160325 , TL-WR841N_V11_150616 and TL-WR841 V10 TL-WR841N_V10_150310 are also affected.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.02039,"percentile":0.81378,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-120"],"published":"2022-07-14T13:41:42Z","modified":"2026-07-09T01:17:29Z","exploits":[{"source":"pocgithub","id":"ilizavr/CVE-2022-30024","title":"ilizavr/CVE-2022-30024","date":"2026-07-28","url":"https://github.com/ilizavr/CVE-2022-30024"}],"products":[{"vendor":"tp-link","product":"tl-wr841_firmware"},{"vendor":"tp-link","product":"tl-wr841n\\(eu\\)_firmware"},{"vendor":"tp-link","product":"tl-wr841n_firmware"}],"references":[{"url":"https://pastebin.com/0XRFr3zE","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30024"},{"url":"http://tl-wr841.com"},{"url":"http://tp-link.com"},{"url":"https://github.com/advisories/GHSA-h8v9-4xr4-x4xq"}],"sources":{"cve":[{"id":"CVE-2022-30024","description":"A buffer overflow in the httpd daemon on TP-Link TL-WR841N V12 (firmware version 3.16.9) devices allows an authenticated remote attacker to execute arbitrary code via a GET request to the page for the System Tools of the Wi-Fi network. This affects TL-WR841 V12 TL-WR841N(EU)_V12_160624 and TL-WR841 V11 TL-WR841N(EU)_V11_160325 , TL-WR841N_V11_150616 and TL-WR841 V10 TL-WR841N_V10_150310 are also affected.","status":"published","published":"2022-07-14T13:41:42Z","modified":"2026-07-09T00:19:05.387Z","updated_at":"2026-11-02T14:34:30.842561Z"}],"euvd":[{"id":"EUVD-2022-35239","description":"A buffer overflow in the httpd daemon on TP-Link TL-WR841N V12 (firmware version 3.16.9) devices allows an authenticated remote attacker to execute arbitrary code via a GET request to the page for the System Tools of the Wi-Fi network. This affects TL-WR841 V12 TL-WR841N(EU)_V12_160624 and TL-WR841 V11 TL-WR841N(EU)_V11_160325 , TL-WR841N_V11_150616 and TL-WR841 V10 TL-WR841N_V10_150310 are also affected.","status":"published","published":"2022-07-14T13:41:42Z","modified":"2026-07-09T00:19:05Z","updated_at":"2026-11-02T18:20:07.696389Z"}],"ghsa":[{"id":"GHSA-h8v9-4xr4-x4xq","title":"A buffer overflow in the httpd daemon on TP-Link TL-WR841N V12 (firmware version 3.16.9) devices...","description":"A buffer overflow in the httpd daemon on TP-Link TL-WR841N V12 (firmware version 3.16.9) devices allows an authenticated remote attacker to execute arbitrary code via a GET request to the page for the System Tools of the Wi-Fi network. This affects TL-WR841 V12 TL-WR841N(EU)_V12_160624 and TL-WR841 V11 TL-WR841N(EU)_V11_160325 , TL-WR841N_V11_150616 and TL-WR841 V10 TL-WR841N_V10_150310 are also affected.","status":"published","published":"2022-07-15T00:00:18Z","modified":"2023-01-27T05:06:06Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:42:50.418716Z"}],"nvd":[{"id":"CVE-2022-30024","description":"A buffer overflow in the httpd daemon on TP-Link TL-WR841N V12 (firmware version 3.16.9) devices allows an authenticated remote attacker to execute arbitrary code via a GET request to the page for the System Tools of the Wi-Fi network. This affects TL-WR841 V12 TL-WR841N(EU)_V12_160624 and TL-WR841 V11 TL-WR841N(EU)_V11_160325 , TL-WR841N_V11_150616 and TL-WR841 V10 TL-WR841N_V10_150310 are also affected.","status":"published","published":"2022-07-14T14:15:13.277Z","modified":"2026-07-09T01:17:29.053Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:07:23.322724Z"}]}}