CVE-2023-49913

🗓️ 09 Apr 2024 14:12:46Reported by talosType

A stack-based buffer overflow vulnerability in Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926 allows remote code execution via crafted HTTP requests

Reporter	Title	Published	Views	Family All 14
BDU FSTEC	The vulnerability of the Radio Scheduling function in wireless access points Tp-Link AC1350 and Tp-Link N300 allows a hacker to execute arbitrary code.	19 Apr 202400:00	–	bdu_fstec
Circl	CVE-2023-49913	11 Apr 202405:25	–	circl
CNNVD	TP-LINK AC1350 缓冲区错误漏洞	9 Apr 202400:00	–	cnnvd
CNVD	Unspecified Vulnerability in TP-LINK AC1350 (CNVD-2024-20287)	11 Apr 202400:00	–	cnvd
Cvelist	CVE-2023-49913	9 Apr 202414:12	–	cvelist
EUVD	EUVD-2023-53811	3 Oct 202520:07	–	euvd
NVD	CVE-2023-49913	9 Apr 202415:15	–	nvd
OSV	CVE-2023-49913	9 Apr 202415:15	–	osv
Positive Technologies	PT-2023-9019 · Tp Link · Eap225 V3 +1	11 Dec 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-49913	9 Jan 202608:59	–	redhatcve

NVD

Vulners

Vulnrichment

Node

AND

tp-link eap225_firmwareMatch5.1.0

tp-link eap225Matchv3

Node

AND

tp-link eap115_firmwareMatch5.0.4

tp-link eap115Matchv4

[
  {
    "vendor": "Tp-Link",
    "product": "AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)",
    "versions": [
      {
        "version": "v5.1.0 Build 20220926",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Tp-Link",
    "product": "N300 Wireless Access Point (EAP115)",
    "versions": [
      {
        "version": "v5.0.4 Build 20220216",
        "status": "affected"
      }
    ]
  }
]

Source	Link
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2023-1888
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2023-1888

17 Jun 2026 06:36Current

7.8High risk

Vulners AI Score7.8

CVSS 3.17.2 - 8.8

EPSS0.01919

SSVC