PT-2018-11337 · Tp Link · Tp-Link Tl-Wa850Re Wi-Fi Range Extender

Published 2018-06-23 · Updated 2018-08-24 · CVE-2018-12694

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions TP-Link TL-WA850RE Wi-Fi Range Extender version 5

Description The issue allows remote attackers to cause a denial of service, resulting in a reboot of the device, by accessing the data/reboot.json endpoint.

Recommendations For TP-Link TL-WA850RE Wi-Fi Range Extender version 5, as a temporary workaround, consider restricting access to the data/reboot.json endpoint until a patch is available.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2018-12694

Affected Products

Tp-Link Tl-Wa850Re Wi-Fi Range Extender

References · 2

• 🔥 https://medium.com/advisability/the-in-security-of-the-tp-link-technologies-tl-wa850re-wi-fi-range-extender-26db87a7a0cc · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-12694 · Security Note