Zero-Day TP-Link SR20 Router Vulnerability Disclosed by Google Dev

guest · Mar 28, 2019

Zero-Day TP-Link SR20 Router Vulnerability Disclosed by Google Dev
March 28, 2019
https://www.bleepingcomputer.com/ne...router-vulnerability-disclosed-by-google-dev/

TP-Link's SR20 Smart Home Router is impacted by a zero-day arbitrary code execution (ACE) vulnerability which allows potential attackers on the same network to execute arbitrary commands as disclosed on Twitter by Google security developer Matthew Garrett.

[...] he explained in the Twitter thread, the zero-day stems from the fact that "TP-Link routers frequently run a process called "tddp" (TP-Link Device Debug Protocol) as root" which has been previously found to contain multiple other vulnerabilities [1, 2].
Zero-day allows attackers to execute arbitrary code as root
[...] Garret concludes by saying that TP-Link should "stop shipping debug daemons on production firmware and if you're going to have a webform to submit security issues then have someone actually respond to it."
Click to expand...

Log in or Sign up

Zero-Day TP-Link SR20 Router Vulnerability Disclosed by Google Dev

guest Guest

Log in or Sign up

Zero-Day TP-Link SR20 Router Vulnerability Disclosed by Google Dev

guest Guest

Useful Searches