PT-2023-5331 · Tp Link · Tp-Link Er5120G

CVE-2023-43135 · Publicado 2023-09-18 · Atualizado 2023-09-22

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TP-LINK ER5120G version 4.0 2.0.0 Build 210817 Rel.80868n

Description The issue is related to insufficient authentication procedures in the TP-LINK ER5120G router, allowing attackers to obtain sensitive device information without authentication, acquire user tokens, and ultimately log in to the device's backend management. This can be exploited by a remote attacker to gain unauthorized access to protected information.

Recommendations For TP-LINK ER5120G version 4.0 2.0.0 Build 210817 Rel.80868n, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authorization

Information Disclosure

Improper Authentication

Enumeração de Fraquezas

CWE-862

CWE-200

CWE-287

Identificadores relacionados

BDU:2023-05959

CVE-2023-43135

Produtos afetados

Tp-Link Er5120G

Referências · 10

• 🔥❌ https://github.com/7R4C4R/CVE/blob/main/TPLINK-TL-ER5120G/unauthorized%20access/Unauthorized%20Access%20Vulnerability.md · Exploit, Deleted
• https://t.me/cvenotify/58234 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1704610921916842109 · Publicação no Twitter
• https://t.me/cibsecurity/70865 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2023-05959 · Nota de Segurança
• https://t.me/cvenotify/58372 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-43135 · Aviso do Fabricante
• https://vuldb.com/?id.240106 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-43135 · Nota de Segurança
• https://tp-link.com/ru/business-networking/load-balance-router/tl-er5120 · Nota