CVE-2023-49134: Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) vulnerability
Tp-Link · AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)
Affected: Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) · Exploitation: possible (1 to 10%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 78% of scored CVEs
DescriptionCVE.org
A command execution vulnerability exists in the tddpd enable_test_mode functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926 and Tp-Link N300 Wireless Access Point (EAP115 V4) v5.0.4 Build 20220216. A specially crafted series of network requests can lead to arbitrary command execution. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability.This vulnerability impacts `uclited` on the EAP115(V4) 5.0.4 Build 20220216 of the N300 Wireless Gigabit Access Point.
Affected products2
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- Tp-Link · AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)v5.1.0 Build 20220926
- Tp-Link · N300 Wireless Access Point (EAP115)v5.0.4 Build 20220216
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Possible (1 to 10%). EPSS between 1% and 10%.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- Tp-Link
- Published
- April 2024
CoverageNo articles yet
No CyberSIXT article names CVE-2023-49134 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.