Tp-Link Ac1350 Wireless Mu-Mimo Gigabit Access Point vulnerabilities

CVE-2023-49134 [CRITICAL] CWE-829 CVE-2023-49134: A command execution vulnerability exists in the tddpd enable_test_mode functionality of Tp-Link AC13 A command execution vulnerability exists in the tddpd enable_test_mode functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926 and Tp-Link N300 Wireless Access Point (EAP115 V4) v5.0.4 Build 20220216. A specially crafted series of network requests can lead to arbitrary command execution. An attacker

CVE-2023-49133 [CRITICAL] CWE-829 CVE-2023-49133: A command execution vulnerability exists in the tddpd enable_test_mode functionality of Tp-Link AC13 A command execution vulnerability exists in the tddpd enable_test_mode functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926 and Tp-Link N300 Wireless Access Point (EAP115 V4) v5.0.4 Build 20220216. A specially crafted series of network requests can lead to arbitrary command execution. An attacker

CVE-2023-49913 [HIGH] CWE-121 CVE-2023-49913: A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionali A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability

CVE-2023-49906 [HIGH] CWE-121 CVE-2023-49906: A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionali A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability

CVE-2023-49910 [HIGH] CWE-121 CVE-2023-49910: A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionali A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability

CVE-2023-49907 [HIGH] CWE-121 CVE-2023-49907: A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionali A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability

CVE-2023-49908 [HIGH] CWE-121 CVE-2023-49908: A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionali A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability

CVE-2023-49912 [HIGH] CWE-121 CVE-2023-49912: A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionali A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability

CVE-2023-49909 [HIGH] CWE-121 CVE-2023-49909: A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionali A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability

CVE-2023-49911 [HIGH] CWE-121 CVE-2023-49911: A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionali A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability

CVE-2023-49074 [HIGH] CWE-749 CVE-2023-49074: A denial of service vulnerability exists in the TDDP functionality of Tp-Link AC1350 Wireless MU-MIM A denial of service vulnerability exists in the TDDP functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A specially crafted series of network requests can lead to reset to factory settings. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability.

CVE-2023-48724 [HIGH] CWE-121 CVE-2023-48724: A memory corruption vulnerability exists in the web interface functionality of Tp-Link AC1350 Wirele A memory corruption vulnerability exists in the web interface functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A specially crafted HTTP POST request can lead to denial of service of the device's web interface. An attacker can send an unauthenticated HTTP POST request to trigger this vulnerability