TP-Link AX1800 WiFi 6 Router (Archer AX21) devices allow unauthenticated attackers (on the LAN) to execute arbitrary code as root via the db_dir field to minidlnad. The attacker obtains the ability to modify files.db, and that can be used to reach a stack-based buffer overflow in minidlna-1.1.2/upnpsoap.c. Exploitation requires that a USB flash drive is connected to the router (customers often do this to make a \\192.168.0.1 share available on their local network).
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Tp-link |
|
No data.
No data.
References
History
Fri, 03 Oct 2025 08:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Tp-link
Tp-link archer Ax21 |
|
| Vendors & Products |
Tp-link
Tp-link archer Ax21 |
Thu, 02 Oct 2025 18:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Thu, 02 Oct 2025 17:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-121 | |
| Metrics |
cvssV3_1
|
Thu, 02 Oct 2025 13:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | TP-Link AX1800 WiFi 6 Router (Archer AX21) devices allow unauthenticated attackers (on the LAN) to execute arbitrary code as root via the db_dir field to minidlnad. The attacker obtains the ability to modify files.db, and that can be used to reach a stack-based buffer overflow in minidlna-1.1.2/upnpsoap.c. Exploitation requires that a USB flash drive is connected to the router (customers often do this to make a \\192.168.0.1 share available on their local network). | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2025-10-02T00:00:00.000Z
Updated: 2025-10-02T16:13:20.575Z
Reserved: 2023-03-23T00:00:00.000Z
Link: CVE-2023-28760
Vulnrichment
Updated: 2025-10-02T16:12:40.356Z
NVD
Status : Awaiting Analysis
Published: 2025-10-02T14:15:41.870
Modified: 2025-10-02T19:11:46.753
Link: CVE-2023-28760
Redhat
No data.