CVE-2019-17147

CVE-2019-17147 is a critical buffer overflow vulnerability affecting TP-LINK TL-WR841N routers, allowing unauthenticated remote attackers to execute arbitrary code. The flaw lies in the web service's improper validation of the Host header, leading to a fixed-length buffer overflow. With a CVSS score of 8.8 (High), exploitation requires no authentication and can lead to complete compromise of the device under the admin user's context. While no public exploit code or active exploitation has been reported, its high FAUCET Risk Score and EPSS percentile indicate a significant potential threat.