CVE-2021-29302 is a buffer overflow vulnerability in the httpd process of TP-Link TL-WR802N(US) and Archer_C50v5_US v4_200 firmware versions <= 2020.06. This flaw allows an unauthenticated attacker to achieve remote code execution and gain a shell on the router by sending a specially crafted message over the network. Rated with a CVSS score of 8.1 (HIGH), the attack has high impact on confidentiality, integrity, and availability, but requires high attack complexity. Despite its severity, there is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 2020.06CPE matchmatch criteria | cpe:2.3:o:tp-link:tl-wr802n_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.