PT-2023-4521 · Tp Link · Tp-Link Tl-Wr1041N
Publicado
2023-08-21
·
Atualizado
2024-10-07
·
CVE-2023-39748
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
TP-Link TL-WR1041N version V2
Description
The issue is related to the component /userRpm/NetworkCfgRpm and allows attackers to cause a Denial of Service (DoS) via a crafted GET request to the "GET" endpoint. This is due to incorrect clearance or release of resources. The exploitation of this issue can allow a remote attacker to cause a service disruption.
Recommendations
For TP-Link TL-WR1041N version V2, as a temporary workaround, consider restricting access to the /userRpm/NetworkCfgRpm component until a patch is available. Avoid using the vulnerable component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Resource Exhaustion
Improper Resource Release
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Tp-Link Tl-Wr1041N