Japan Vulnerability NotesJVN:29657972JVN#29657972: TP-Link RE300 V1 tdpServer vulnerable to improper processing of its input
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
0.0004 Low
EPSS
Percentile
9.1%
tdpServer of TP-Link RE300 V1 improperly processes its input, possibly resulting to crash (CWE-228).
Impact
An attacker may be able to cause a denial-of-service (DoS) condition of the product’s OneMesh function.
Solution
Update the software
Update the software to the latest version according to the information provided by the developer.
This vulnerability has been addressed in the firmware version 221009.
Products Affected
- TP-Link RE300 V1 firmware versions prior to 221009
Related
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
0.0004 Low
EPSS
Percentile
9.1%