CVE-2020-28005 describes a buffer overflow vulnerability in the httpd service of TP-Link TL-WPA4220 devices (hardware versions 2-4). An authenticated attacker can trigger a denial of service by sending a crafted POST request to the /admin/syslog endpoint. This vulnerability has a CVSS score of 6.5 (Medium), indicating it can be exploited remotely with low complexity by an authenticated user, leading to high availability impact. There is currently no public exploit code available, nor is there evidence of active exploitation or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
All Versions ImpactedCPE matchmatch criteria | cpe:2.3:o:tp-link:tl-wpa4220_firmware:*:*:*:*:*:*:*:* | ||
< tl-wpa4220\(eu\)_v4_201023CPE matchmatch criteria | cpe:2.3:o:tp-link:tl-wpa4220_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.