CVSS Score of 10 (low)


Published Jun 22, 2023
Updated: Jun 30, 2023
CWE ID 125


CVE-2023-36356 is a vulnerability found in TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8, TL-WR941ND V5, and TL-WR740N V1/V2 routers. This vulnerability allows attackers to perform a Denial of Service (DoS) attack by exploiting a buffer read out-of-bounds in the /userRpm/VirtualServerRpm component. The risk score for this vulnerability is 26. To remediate the issue, users should update their router firmware to the latest version provided by TP-Link. The potential danger posed to organizations is that an attacker could disrupt network services and cause significant downtime for affected devices.


Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-36356 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options