CVE-2023-49906

🗓️ 09 Apr 2024 14:12:46Reported by talosType

A stack-based buffer overflow in Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point allows remote code execution via crafted HTTP requests

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2023-49906	11 Apr 202406:21	–	circl
CNNVD	TP-LINK AC1350 缓冲区错误漏洞	9 Apr 202400:00	–	cnnvd
Cvelist	CVE-2023-49906	9 Apr 202414:12	–	cvelist
EUVD	EUVD-2023-53804	3 Oct 202520:07	–	euvd
NVD	CVE-2023-49906	9 Apr 202415:15	–	nvd
OSV	CVE-2023-49906	9 Apr 202415:15	–	osv
Positive Technologies	PT-2023-9008 · Tp Link · Eap225 V3	11 Dec 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-49906	9 Jan 202608:59	–	redhatcve
Talos	Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) web interface Radio Scheduling stack-based buffer overflow vulnerability	9 Apr 202400:00	–	talos
Talos Blog	Multiple vulnerabilities in TP-Link Omada system could lead to root access	26 Jun 202416:00	–	talosblog

NVD

Vulners

Vulnrichment

Node

tp-link eap225_firmwareMatch5.1.0

AND

tp-link eap225Matchv3

[
  {
    "vendor": "Tp-Link",
    "product": "AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)",
    "versions": [
      {
        "version": "v5.1.0 Build 20220926",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Tp-Link",
    "product": "N300 Wireless Access Point (EAP115)",
    "versions": [
      {
        "version": "v5.0.4 Build 20220216",
        "status": "affected"
      }
    ]
  }
]

Source	Link
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2023-1888
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2023-1888

04 Nov 2025 19:16Current

7.8High risk

Vulners AI Score7.8

CVSS 3.17.2 - 8.8

EPSS0.00861

SSVC