CVE-2018-17006: TP-Link Tl-WR886N Firmware

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for firewall lan_manage mac2.

Affected products

• TP-Link Tl-WR886N Firmware: version 6.0_2.3.4 only; version 7.0_1.1.0 only

Published 2018-09-13. Last modified 2026-06-17.