PT-2024-4791 · Tp Link · Tp-Link Tl-7Dr5130

Ke Xu + 4 · Published 2024-06-10 · Updated 2024-10-25 · CVE-2024-37661

Positive Technologies (AI Summary)

CVSS v2.0

6.7

Medium

Base vector

AV:A/AC:L/Au:S/C:P/I:P/A:C

Name of the Vulnerable Software and Affected Versions: TP-LINK TL-7DR5130 version 1.0.23

Description: The issue is related to the mechanism of transmitting routing information to hosts via ICMP Redirect in the TP-LINK TL-7DR5130 wireless router's firmware. It is associated with insufficient verification of the communication channel source. An attacker in the same WLAN as the victim can exploit this by sending specially crafted ICMP messages to hijack the traffic between the victim and any remote server.

Recommendations: For TP-LINK TL-7DR5130 version 1.0.23, consider restricting access to the network to minimize the risk of exploitation until a patch is available. As a temporary workaround, disabling the handling of ICMP redirect messages could help mitigate the issue. However, specific steps for this action are not provided. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Origin Validation Error

Weakness Enumeration

CWE-940

CWE-346

Related Identifiers

BDU:2024-05315

CVE-2024-37661

Affected Products

Tp-Link Tl-7Dr5130

References · 6

• 🔥 https://github.com/ouuan/router-vuln-report/blob/master/icmp-redirect/tl-7dr5130-redirect.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-37661 · Security Note
• https://osv.dev/vulnerability/CVE-2024-37661 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-05315 · Security Note
• https://vuldb.com/ru/?id.268830 · Note
• https://tp-link.com.cn/product_3289.html · Note