PT-2023-8993 · Tp Link · Tp-Link Ac1350 Wireless Mu-Mimo Gigabit Access Point+1
The Vulnerability
·
Published
2023-12-11
·
Updated
2025-08-21
·
CVE-2023-49134
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) version 5.1.0 Build 20220926
Tp-Link N300 Wireless Access Point (EAP115 V4) version 5.0.4 Build 20220216
Description
A command execution vulnerability exists in the tddpd enable test mode functionality. This issue can be exploited by sending a specially crafted series of network requests, leading to arbitrary command execution. An attacker can trigger this vulnerability by sending a sequence of unauthenticated packets. The vulnerability impacts
uclited on the affected devices.Recommendations
For Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) version 5.1.0 Build 20220926, consider disabling the tddpd enable test mode functionality until a patch is available.
For Tp-Link N300 Wireless Access Point (EAP115 V4) version 5.0.4 Build 20220216, restrict access to the
uclited component to minimize the risk of exploitation.
As a temporary workaround, consider blocking unauthenticated packets to the affected devices until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Tp-Link Ac1350 Wireless Mu-Mimo Gigabit Access Point
Tp-Link N300 Wireless Access Point