Lucene search

[email protected]CVE-2023-49074

HistoryApr 09, 2024 - 3:15 p.m.

CVE-2023-49074

2024-04-0915:15:28

CWE-749

[email protected]

web.nvd.nist.gov

cve-2023-49074

tddp functionality

tp-link

wireless mu-mimo

gigabit access point

reset to factory settings

unauthenticated packets

7.4 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H

7.3 High

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:P/A:P

0.0005 Low

EPSS

Percentile

17.0%

JSON

A denial of service vulnerability exists in the TDDP functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A specially crafted series of network requests can lead to reset to factory settings. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability.

VendorProductVersionCPE
tp\-linktl\-wr941nd_v3*cpe:2.3:h:tp\-link:tl\-wr941nd_v3:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
tp\-link	tl\-wr941nd_v3	*	cpe:2.3:h:tp\-link:tl\-wr941nd_v3::::::::

References

talosintelligence.com/vulnerability_reports/TALOS-2023-1861

7.4 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H

7.3 High

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:P/A:P

0.0005 Low

EPSS

Percentile

17.0%

JSON

Related for CVE-2023-49074

talos1 talosblog1