CVE-2023-49074

high · 7.4

A denial of service vulnerability exists in the TDDP functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A specially crafted series of network requests can lead to reset to factory settings. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability.

7.4

CVSS

13.5%

EPSS (exploit prob.)

96th

EPSS percentile

2024-04-09

Published

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H

Weaknesses

CWE-749

Affected products

Vendor	Product	Affected versions
tp-link	eap225_firmware	5.1.0
tp-link	eap225	v3

Check a specific version with /api/v1/cve/match.

References

https://talosintelligence.com/vulnerability_reports/TALOS-2023-1861
https://talosintelligence.com/vulnerability_reports/TALOS-2023-1861
https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1861

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2023-49074