Critical severity9.8NVD Advisory· Published Nov 20, 2020· Updated Jun 17, 2026
CVE-2020-28877
CVE-2020-28877
Description
Buffer overflow in in the copy_msg_element function for the devDiscoverHandle server in the TP-Link WR and WDR series, including WDR7400, WDR7500, WDR7660, WDR7800, WDR8400, WDR8500, WDR8600, WDR8620, WDR8640, WDR8660, WR880N, WR886N, WR890N, WR890N, WR882N, and WR708N.
Affected products
18- TP-Link/WR and WDR seriesdescription
- cpe:2.3:o:tp-link:wdr7400_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:wdr7500_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:wdr7660_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:wdr7800_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:wdr8400_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:wdr8500_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:wdr8600_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:wdr8620_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:wdr8640_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:wdr8660_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:wr880n_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:wr886n_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:wr890n_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:wr882n_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:wr708n_firmware:-:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- exchange.xforce.ibmcloud.com/vulnerabilities/192112nvdThird Party Advisory
News mentions
0No linked articles in our index yet.