CVE-2018-16119: TP-Link Tl-WR1043ND Firmware

High severity, CVSS 7.2. EPSS: 34.1% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the httpd server of TP-Link WR1043nd (Firmware Version 3) allows remote attackers to execute arbitrary code via a malicious MediaServer request to /userRpm/MediaServerFoldersCfgRpm.htm.

Affected products

• TP-Link Tl-WR1043ND Firmware: version 3.00 only

Published 2019-06-20. Last modified 2026-06-17.