Memory Corruption Vulnerability in Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point
CVE-2023-48724

7.5HIGH

Key Information:

Vendor
Tp-link
Status
Ac1350 Wireless Mu-mimo Gigabit Access Point (eap225 V3)
Vendor
CVE Published:
9 April 2024

Summary

A memory corruption issue exists within the web interface of the Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point, specifically affecting the EAP225 V3 version 5.1.0 Build 20220926. Attackers can exploit this vulnerability by sending specially crafted HTTP POST requests, which may lead to a denial of service of the device's web interface. This can permit unauthorized interruption of normal web service functions, emphasizing the need for prompt updates and mitigations to secure affected installations.

Affected Version(s)

AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926

References

https://talosintelligence.com/vulnerability_reports/TALOS...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Discovered by the Vulnerability Discovery and Research team of Cisco Talos.
.