CVE-2024-25139

In the cloud-brd binary process, responsible for handling cloud communication, an integer overflow (CWE-120) occurs, leading to a heap-based buffer overflow. Through appropriate heap shaping, an attacker can control code execution in the context of the cloud-brd process. Since this process runs at the root level, successful exploitation gives the attacker full control over the device.

An attacker can execute arbitrary code with root privileges on the vulnerable device, gaining full control over the router, network, and traffic passing through it. This results in violation of system confidentiality, integrity, and availability.

Update the firmware to version ER605(UN)_v2_2.2.4 Build 020240119 or later, available on the TP-Link manufacturer website. Until the update is applied, it is recommended to restrict the device's access to external cloud services at the firewall level.

TP-Link Omada ER605 in firmware versions 1.0.1 through (v2.6) 2.2.3 inclusive