PT-2023-9012 · Tp Link · Tp-Link N300+1
The Vulnerability
·
Published
2023-12-11
·
Updated
2025-08-21
·
CVE-2023-49074
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) version 5.1.0 Build 20220926
Tp-Link N300 (affected versions not specified)
Description
A denial of service issue exists in the TDDP functionality, related to the use of dangerous methods or functions. This can be exploited by a remote attacker, who can send specially crafted network packets to trigger the issue, potentially leading to a reset to factory settings. An attacker can send a sequence of unauthenticated packets to exploit this issue.
Recommendations
For Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) version 5.1.0 Build 20220926:
As a temporary workaround, consider restricting access to the TDDP functionality until a patch is available.
For Tp-Link N300:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Tp-Link Ac1350 Wireless Mu-Mimo Gigabit Access Point
Tp-Link N300