PT-2024-2317 · Tp Link · Tp-Link Devices

Published 2024-03-19 · Updated 2024-03-19

Positive Technologies · (AI Summary)

CVSS v2.0

7.8

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

**Name of the Vulnerable Software and Affected Versions**

TP-LINK devices (affected versions not specified)

**Description**

The issue is related to a buffer overflow vulnerability in the implementation of the TDDP protocol used for debugging TP-LINK network devices. An attacker can exploit this issue by sending a specially crafted UDP packet, potentially leading to a denial of service.

**Recommendations**

At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

BDU:2024-02251

Affected Products

Tp-Link Devices

References · 3

• https://bdu.fstec.ru/vul/2024-02251 · Security Note
• https://github.com/softScheck/tplink-smartplug/blob/master/tddp-client/README.md · Note
• https://boschko.ca/tp-link-tddp-bof · Note