PT-2024-4790 · Tp Link · Tp-Link Tl-7Dr5130

Ke Xu + 4 · Published 2024-06-10 · Updated 2024-08-14 · CVE-2024-37662

Positive Technologies (AI Summary)

CVSS v2.0

6.7

Medium

Base vector

AV:A/AC:L/Au:S/C:P/I:P/A:C

Name of the Vulnerable Software and Affected Versions: TP-LINK TL-7DR5130 version 1.0.23

Description: The issue is related to insufficient validation of the communication channel source, which can be exploited by an attacker to perform a TCP Reset attack. This can be done by sending specially crafted RST messages to a remote server, potentially allowing the attacker to disconnect or hijack the traffic between the victim and the server. An attacker in the same WLAN as the victim can exploit this by sending forged TCP RST messages to evict NAT mappings in the router.

Recommendations: For TP-LINK TL-7DR5130 version 1.0.23, consider restricting access to port 50005 as a temporary workaround to minimize the risk of exploitation. Additionally, avoid using the router's WLAN functionality until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-940

Related Identifiers

BDU:2024-05314

CVE-2024-37662

Affected Products

Tp-Link Tl-7Dr5130

References · 8

• 🔥 https://github.com/ouuan/router-vuln-report/blob/master/nat-rst/tl-7dr5130-nat-rst.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-37662 · Security Note
• https://osv.dev/vulnerability/CVE-2024-37662 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-05314 · Security Note
• https://t.me/cvenotify/90526 · Telegram Post
• https://tp-link.com.cn/product_3289.html · Note
• https://vuldb.com/ru/?id.268828 · Note
• https://github.com/advisories/GHSA-c9q3-f5v3-g7hw · Note