{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-30T17:01:37.728","vulnerabilities":[{"cve":{"id":"CVE-2023-39745","sourceIdentifier":"cve@mitre.org","published":"2023-08-21T03:15:11.487","lastModified":"2026-06-17T06:12:50.887","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"TP-Link TL-WR940N V2, TP-Link TL-WR941ND V5 and TP-Link TL-WR841N V8 were discovered to contain a buffer overflow via the component /userRpm/AccessCtrlAccessRulesRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"tp-link","product":"tl-wr941nd_v2","defaultStatus":"unknown","cpes":["cpe:2.3:h:tp-link:tl-wr941nd_v2:-:*:*:*:*:*:*:*"],"versions":[{"version":"2","status":"affected"}]},{"vendor":"tp-link","product":"tl-wr941nd","defaultStatus":"unknown","cpes":["cpe:2.3:h:tp-link:tl-wr941nd:v5:*:*:*:*:*:*:*"],"versions":[{"version":"v5","status":"affected"}]},{"vendor":"tp-link","product":"tl-wr841n","defaultStatus":"unknown","cpes":["cpe:2.3:h:tp-link:tl-wr841n:8.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-07T16:34:40.595695Z","id":"CVE-2023-39745","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:tp-link:tl-wr940n_v2_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"465D8E81-9D1D-4F1E-8286-A20FA254B28D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:tp-link:tl-wr940n_v2:-:*:*:*:*:*:*:*","matchCriteriaId":"1F279E7C-77BB-419B-97F4-378392560828"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:tp-link:tl-wr941nd_v5_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"072943A3-C949-4C5B-B5CC-6CC4CD0CCEC1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:tp-link:tl-wr941nd_v5:-:*:*:*:*:*:*:*","matchCriteriaId":"0C3923D0-6ED5-491C-B5CE-9933FF08F63E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:tp-link:tl-wr841n_v8_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"0CDB9597-BB6D-457D-B609-85A564C3037E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:tp-link:tl-wr841n_v8:-:*:*:*:*:*:*:*","matchCriteriaId":"C92B3785-F0A1-444A-A3D0-3E0ADCE31170"}]}]}],"references":[{"url":"https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/16/TP-Link%20WR940N%20WR941ND%20WR841N%20wireless%20router%20userRpmAccessCtrlAccessRulesRpm%20buffer%20read%20out-of-bounds%20vulnerability.md","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/16/TP-Link%20WR940N%20WR941ND%20WR841N%20wireless%20router%20userRpmAccessCtrlAccessRulesRpm%20buffer%20read%20out-of-bounds%20vulnerability.md","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}}]}