Omada Er605
Approved changes feed: RSS · Atom
cpe:2.3:a:tp_link:omada_er605:2.6_2.2.2_build_20231017:*:*:*:*:*:*:*part: a version: 2.6_2.2.2_build_20231017 update: *
| Vendor | Tp Link (022d43a4-0844-5dfe-a960-dd495b790e6a) |
|---|---|
| Product | Omada Er605 (2205beb3-eb5d-5ebe-af8c-cba74692f661) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-5244 |
vulnerable | 2026-06-08 06:56:15.314775 |
TP-Link Omada ER605 Reliance on Security Through Obscurity Vulnerability
MEDIUM (5)
TP-Link Omada ER605 Reliance on Security Through Obscurity Vulnerability. This vulnerability allows network-adjacent attackers to access or spoof DDNS messages on affected installations of TP-Link Omada ER605 routers. Authentication is not required to exploit this vulnerability. However, devices are vulnerable only if configured to use the Comexe DDNS service.
The specific flaw exists within the cmxddnsd executable. The issue results from reliance on obscurity to secure network data. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-22439.
Published: 2024-05-23T21:56:08.846Z
Updated: 2024-08-01T21:03:11.048Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5243 |
vulnerable | 2026-06-08 06:56:15.314107 |
TP-Link Omada ER605 Buffer Overflow Remote Code Execution Vulnerability
HIGH (7.5)
TP-Link Omada ER605 Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Omada ER605 routers. Authentication is not required to exploit this vulnerability. However, devices are vulnerable only if configured to use the Comexe DDNS service.
The specific flaw exists within the handling of DNS names. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-22523.
Published: 2024-05-23T21:56:04.395Z
Updated: 2024-08-01T21:03:11.130Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5242 |
vulnerable | 2026-06-08 06:56:15.313380 |
TP-Link Omada ER605 Stack-based Buffer Overflow Remote Code Execution Vulnerability
HIGH (7.5)
TP-Link Omada ER605 Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Omada ER605 routers. Authentication is not required to exploit this vulnerability. However, devices are vulnerable only if configured to use the Comexe DDNS service.
The specific flaw exists within the handling of DDNS error codes. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-22522.
Published: 2024-05-23T21:55:59.756Z
Updated: 2024-08-01T21:03:11.096Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.