CVE-2024-11237: TP-Link VN020-f3v(t) Firmware

Critical severity, CVSS 9.8. EPSS: 5.3% chance of exploitation in the next 30 days.

A vulnerability, which was classified as critical, has been found in TP-Link VN020 F3v(T) TT_V6.2.1021. Affected by this issue is some unknown functionality of the component DHCP DISCOVER Packet Parser. The manipulation of the argument hostname leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Affected products

• TP-Link VN020-f3v(t) Firmware: version tt_v6.2.1021 only

Published 2024-11-15. Last modified 2026-06-17.