EUVD-2026-73942
GHSA-j5wp-3x5f-9h6c
Severity by source
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Adjacent-network access and admin authentication required for config upload; all three impact metrics high given full root-level device compromise potential.
Primary rating from Vendor (f23511db-6c3e-4e32-a477-6aa17d310630).
CVSS VectorVendor: f23511db-6c3e-4e32-a477-6aa17d310630
Lifecycle Timeline
3DescriptionCVE.org
A stack-based buffer overflow vulnerability exists in the httpd component of RE210 AC750 due to improper bounds checking in the splitString function when processing an uploaded configuration file. An authenticated attacker on the local network can upload a crafted configuration file to trigger the overflow, leading to remote code execution.
Successful exploitation may allow unauthorized access to sensitive information, modification of device configuration and network behavior, or disruption of device availability.
AnalysisAI
Stack-based buffer overflow in the TP-Link RE210 AC750 range extender's httpd component enables authenticated, adjacent-network attackers to achieve remote code execution by uploading a specially crafted configuration file that exceeds bounds in the splitString function. Affected firmware spans US builds through 3.14.2 Build 171205 Rel.71984n and EU builds through 3.14.2 Build 141218 Rel.36430n, per EUVD-2026-73942. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires: (1) admin-level authenticated access to the RE210 AC750 web management interface - the CVSS 4.0 PR:H metric confirms high-privilege authentication is mandatory, and the configuration file upload capability is an administrative function; (2) network adjacency - the attacker must reside on the same local network segment as the device (AV:A), precluding direct exploitation from the internet; (3) the ability to upload a specially crafted configuration file that triggers the `splitString` bounds-check failure in the httpd component. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 8.5 with AV:A and PR:H accurately reflects the constrained attack surface: exploitation requires both local network adjacency and authenticated (admin-level) access, which substantially limits opportunistic mass exploitation. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Consult the TP-Link support advisory at https://www.tp-link.com/en/support/faq/3562/ and apply the latest available firmware for the RE210 AC750 from the TP-Link download center. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, conduct a complete inventory of all TP-Link RE210 AC750 range extenders deployed across the network and document their current firmware versions against the affected builds (US: up to 3.14.2 Build 171205 Rel.71984n; EU: up to 3.14.2 Build 141218 Rel.36430n). …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-121 – Stack-based Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today