CVE-2020-28877: TP-Link WDR7400 Firmware

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Buffer overflow in in the copy_msg_element function for the devDiscoverHandle server in the TP-Link WR and WDR series, including WDR7400, WDR7500, WDR7660, WDR7800, WDR8400, WDR8500, WDR8600, WDR8620, WDR8640, WDR8660, WR880N, WR886N, WR890N, WR890N, WR882N, and WR708N.

Affected products

• TP-Link WDR7400 Firmware: affected versions not specified
• TP-Link WDR7500 Firmware: affected versions not specified
• TP-Link WDR7660 Firmware: affected versions not specified
• TP-Link WDR7800 Firmware: affected versions not specified
• TP-Link WDR8400 Firmware: affected versions not specified
• TP-Link WDR8500 Firmware: affected versions not specified
• TP-Link WDR8600 Firmware: affected versions not specified
• TP-Link WDR8620 Firmware: affected versions not specified
• TP-Link WDR8640 Firmware: affected versions not specified
• TP-Link WDR8660 Firmware: affected versions not specified
• TP-Link WR708N Firmware: affected versions not specified
• TP-Link WR880N Firmware: affected versions not specified
• TP-Link WR882N Firmware: affected versions not specified
• TP-Link WR886N Firmware: affected versions not specified
• TP-Link WR890N Firmware: affected versions not specified

Published 2020-11-20. Last modified 2026-06-17.