CVE-2023-49133
published 2024-04-09CVE-2023-49133: A command execution vulnerability exists in the tddpd enable_test_mode functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0…
PriorityP270critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
1.75%
75.0th percentile
A command execution vulnerability exists in the tddpd enable_test_mode functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926 and Tp-Link N300 Wireless Access Point (EAP115 V4) v5.0.4 Build 20220216. A specially crafted series of network requests can lead to arbitrary command execution. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability.This vulnerability impacts `uclited` on the EAP225(V3) 5.1.0 Build 20220926 of the AC1350 Wireless MU-MIMO Gigabit Access Point.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| tp-link | ac1350_wireless_mu-mimo_gigabit_access_point | — | — |
| tp-link | eap115_firmware | — | — |
| tp-link | eap225_firmware | — | — |
| tp-link | n300_wireless_access_point | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
Talos
Multiple vulnerabilities in TP-Link Omada system could lead to root access
blogs_talos·2024-06-26·CVSS 7.2
[HIGH] Multiple vulnerabilities in TP-Link Omada system could lead to root access
- The TP-Link Omada system is a software-defined networking solution for small to medium-sized businesses. It touts cloud-managed devices and local management for all Omada devices.
- The supported devices in this ecosystem vary greatly but include wireless access points, routers, switches, VPN devices and hardware controllers for the Omada software.
- Cisco Talos researchers have discovered and helped to patch several vulnerabilities in the Omada system, focusing on a small subset of the available devices, including the EAP 115 and EAP 225 wireless access points, and the ER7206 gigabit VPN router.
- Twelve unique vulnerabilities were identified and reported to the vendor following our responsible disclosure policy.
Talos ID
CVE(s)
TALOS-2023-1888
CVE-2023-49906-CVE-2023-49913
TALOS-2
Talos
Multiple vulnerabilities in TP-Link Omada system could lead to root access
blogs_talos·2024-06-26·CVSS 7.2
[HIGH] Multiple vulnerabilities in TP-Link Omada system could lead to root access
## Multiple vulnerabilities in TP-Link Omada system could lead to root access
The TP-Link Omada system is a software-defined networking solution for small to medium-sized businesses. It touts cloud-managed devices and local management for all Omada devices.
The supported devices in this ecosystem vary greatly but include wireless access points, routers, switches, VPN devices and hardware controllers for the Omada software.
Cisco Talos researchers have discovered and helped to patch several vulnerabilities in the Omada system, focusing on a small subset of the available devices, including the EAP 115 and EAP 225 wireless access points, and the ER7206 gigabit VPN router.
Twelve unique vulnerabilities were identified and reported to the vendor following our responsible disclosure policy.
Talos
Vulnerability in some TP-Link routers could lead to factory reset
blogs_talos·2024-04-10·CVSS 7.4
[HIGH] Vulnerability in some TP-Link routers could lead to factory reset
## Vulnerability in some TP-Link routers could lead to factory reset
Cisco Talos’ Vulnerability Research team has disclosed 10 vulnerabilities over the past three weeks, including four in a line of TP-Link routers, one of which could allow an attacker to reset the devices’ settings back to the factory default.
A popular open-source software for internet-of-things (IoT) and industrial control systems (ICS) networks also contains multiple vulnerabilities that could be used to arbitrarily create new files on the affected systems or overwrite existing ones.
For Snort coverage that can detect the exploitation of these vulnerabilities, download the latest rule sets from Snort.org , and our latest Vulnerability Advisories are always posted on Talos Intelligence’s website .
## Denial-of-servic
Talos
Vulnerability in some TP-Link routers could lead to factory reset
blogs_talos·2024-04-10·CVSS 7.4
[HIGH] Vulnerability in some TP-Link routers could lead to factory reset
Cisco Talos’ Vulnerability Research team has disclosed 10 vulnerabilities over the past three weeks, including four in a line of TP-Link routers, one of which could allow an attacker to reset the devices’ settings back to the factory default.
A popular open-source software for internet-of-things (IoT) and industrial control systems (ICS) networks also contains multiple vulnerabilities that could be used to arbitrarily create new files on the affected systems or overwrite existing ones.
For Snort coverage that can detect the exploitation of these vulnerabilities, download the latest rule sets from Snort.org, and our latest Vulnerability Advisories are always posted on Talos Intelligence’s website.
# Denial-of-service, remote code execution vulnerabilities in TP-Link AC1350 router
Talos
2024-04-09
Published