TP-Link Tl-WDR7661 Firmware vulnerabilities

2 CVEs affecting TP-Link Tl-WDR7661 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-26988, published 2022-05-10.

More from TP-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-26988, published 2022-05-10. High severity, CVSS 7.8. EPSS: 1.5% chance of exploitation in the next 30 days. TP-Link TL-WDR7660 2.0.30, Mercury D196G 20200109_2.0.4, and Fast FAC1900R 20190827_2.0.2 routers have a stack overflow issue in `MntAte` function. Local users could get remote code execution.
• CVE-2022-26987, published 2022-05-10. High severity, CVSS 7.8. EPSS: 1.5% chance of exploitation in the next 30 days. TP-Link TL-WDR7660 2.0.30, Mercury D196G 20200109_2.0.4, and Fast FAC1900R 20190827_2.0.2 routers have a stack overflow issue in `MmtAtePrase` function. Local users could get remote code execution.