NEW TP-LINK ZERO-DAY SURFACES AS CISA WARNS OTHER FLAWS ARE EXPLOITED

Summary from the TLDR InfoSec newsletter

TP-Link has confirmed the existence of an unpatched zero-day vulnerability impacting multiple routers. The vulnerability was discovered by a security researcher who stated that it is caused by a stack buffer overflow in the CPE WAN Management Protocol (CWMP). An attacker could exploit it by redirecting vulnerable devices to a malicious CWMP server, which could deliver an oversized SOAP payload, leading to remote code execution.