CVE-2024-11237

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as critical, has been found in TP-Link VN020 F3v(T) TT_V6.2.1021. Affected by this issue is some unknown functionality of the component DHCP DISCOVER Packet Parser. The manipulation of the argument hostname leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119 CWE-121 CWE-787

Affected software

Vendor	Product	Versions
TP-Link	VN020 F3v(T)	TT_V6.2.1021
tp-link	vn020_f3v_firmware	tt_v6.2.1021

References

https://github.com/Zephkek/TP-ThumperExploit, Third Party Advisory
https://github.com/Zephkek/TP-Thumper/blob/main/poc.cExploit
https://vuldb.com/?ctiid.284672Permissions Required, VDB Entry
https://vuldb.com/?id.284672Third Party Advisory, VDB Entry
https://vuldb.com/?submit.438408Third Party Advisory, VDB Entry
https://www.tp-link.com/Product

Timeline

Published: Nov 15, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-112385.3A vulnerability, which was classified as critical, was found in Landray EKP up to 16.0. This affects the function delPreviewFile of the file CVE-2024-112394.3A vulnerability has been found in Landray EKP up to 16.0 and classified as critical. This vulnerability affects the function deleteFile of t CVE-2024-11244.3The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized email sending due to a missing cap CVE-2024-112406.1A vulnerability was found in IBPhoenix ibWebAdmin up to 1.0.2 and classified as problematic. This issue affects some unknown processing of t CVE-2024-112417.5A vulnerability was found in code-projects Job Recruitment 1.0. It has been declared as critical. Affected by this vulnerability is an unkno CVE-2024-112427.2A vulnerability was found in ZZCMS 2023. It has been rated as critical. Affected by this issue is some unknown functionality of the file /ad CVE-2024-112436.1A vulnerability classified as problematic has been found in code-projects Online Shop Store 1.0. This affects an unknown part of the file /s CVE-2024-112449.8A vulnerability classified as critical was found in code-projects Farmacia 1.0. This vulnerability affects unknown code of the file /editar-CVE-2024-112457.5A vulnerability, which was classified as critical, has been found in code-projects Farmacia 1.0. This issue affects some unknown processing CVE-2024-112465.4A vulnerability, which was classified as problematic, was found in code-projects Farmacia 1.0. Affected is an unknown function of the file /CVE-2024-112475.4A vulnerability has been found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. Affected by this vulnerability is an CVE-2024-112488.8A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. Affected by this issue is the function formSetRebootTimer of