The vulnerability of the syntax analysis function for URI identifiers of HTTP-servers of TP-Link TL-R600VPN microprogramming devices allows a perpetrator to cause a service failure.

🗓️ 17 Dec 2019 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

The TP-Link router HTTP server URI parsing vulnerability may cause service failure from crafted requests.

Reporter	Title	Published	Views	Family All 15
ATTACKERKB	CVE-2018-3948	30 Nov 201800:00	–	attackerkb
Circl	CVE-2018-3948	21 Nov 201817:54	–	circl
CNVD	TP-Link TL-R600VPN HTTP Server Denial of Service Vulnerability	21 Nov 201800:00	–	cnvd
Check Point Advisories	Linux System Files Information Disclosure (CVE-2018-10823; CVE-2018-3948)	16 Jun 201400:00	–	checkpoint_advisories
CVE	CVE-2018-3948	30 Nov 201817:00	–	cve
Cvelist	CVE-2018-3948	30 Nov 201817:00	–	cvelist
EUVD	EUVD-2018-15734	7 Oct 202500:30	–	euvd
NVD	CVE-2018-3948	30 Nov 201817:29	–	nvd
OpenVAS	TP-Link Wi-Fi Routers Multiple Vulnerabilities	20 Nov 201800:00	–	openvas
Prion	Denial of service	30 Nov 201817:29	–	prion

Vulners

Node

tp-link_technologies_co tl-r600vpnMatch1.2.3

Source	Link
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2018-0617
securitylab	www.securitylab.ru/news/496578.php
tp-link	www.tp-link.com/us/support/download/tl-r600vpn/
web	www.web.nvd.nist.gov/view/vuln/detail

17 Dec 2019 00:00Current

CVSS 37.5

CVSS 27.8

EPSS0.03357

TP-Link router Hypertext transfer protocol Uniform Resource Identifier parsing Service disruption Crafted requests