PT-2024-12227 · Tp Link · Tp-Link Tl-War1200L+5

Ke Xu + 5 · Published 2024-05-28 · Updated 2024-05-29 · CVE-2023-30307

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions TP-LINK TL-R473GP-AC TP-LINK XDR6020 TP-LINK TL-R479GP-AC TP-LINK TL-R4239G TP-LINK TL-WAR1200L TP-LINK TL-R476G

Description An issue in the listed TP-LINK routers allows attackers to hijack TCP sessions, potentially leading to a denial of service.

Recommendations For TP-LINK TL-R473GP-AC, update to a version that addresses the TCP session hijacking issue. For TP-LINK XDR6020, update to a version that addresses the TCP session hijacking issue. For TP-LINK TL-R479GP-AC, update to a version that addresses the TCP session hijacking issue. For TP-LINK TL-R4239G, update to a version that addresses the TCP session hijacking issue. For TP-LINK TL-WAR1200L, update to a version that addresses the TCP session hijacking issue. For TP-LINK TL-R476G, update to a version that addresses the TCP session hijacking issue.

Fix

Session Fixation

Weakness Enumeration

CWE-384

Related Identifiers

CVE-2023-30307

Affected Products

Tp-Link Tl-R4239G

Tp-Link Tl-R473Gp-Ac

Tp-Link Tl-R476G

Tp-Link Tl-R479Gp-Ac

Tp-Link Tl-War1200L

Tp-Link Xdr6020

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2023-30307 · Security Note
• https://ndss-symposium.org/ndss-paper/exploiting-sequence-number-leakage-tcp-hijacking-in-nat-enabled-wi-fi-networks · Note