cve/2023/CVE-2023-49074.md

18 lines
945 B
Markdown
Raw Normal View History

2024-05-28 08:49:17 +00:00
### [CVE-2023-49074](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-49074)
![](https://img.shields.io/static/v1?label=Product&message=AC1350%20Wireless%20MU-MIMO%20Gigabit%20Access%20Point%20(EAP225%20V3)&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%20v5.1.0%20Build%2020220926%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-749%3A%20Exposed%20Dangerous%20Method%20or%20Function&color=brighgreen)
### Description
A denial of service vulnerability exists in the TDDP functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A specially crafted series of network requests can lead to reset to factory settings. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/fkie-cad/nvd-json-data-feeds