PT-2024-9297 · Tp Link · Tp-Link Vn020 F3V

Mohamed Maatallah + 1 · Published 2024-12-08 · Updated 2025-05-29 · CVE-2024-12342

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions: TP-Link VN020 F3v(T) version TT V6.2.1021

Description: A critical issue affects the Incomplete SOAP Request Handler component, specifically the processing of the file /control/WANIPConnection. This can lead to denial of service when exploited. The attack can only be initiated within the local network. The issue is related to incorrect resource cleanup or release.

Recommendations: For TP-Link VN020 F3v(T) version TT V6.2.1021, as a temporary workaround, consider restricting access to the /control/WANIPConnection file until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

BDU:2024-10985

CVE-2024-12342

Affected Products

Tp-Link Vn020 F3V

References · 16

• 🔥 https://github.com/Zephkek/TP-WANPunch/blob/main/README.md · Exploit
• 🔥 https://exploit-db.com/exploits/52250 · Exploit
• https://bdu.fstec.ru/vul/2024-10985 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-12342 · Security Note
• https://github.com/Zephkek/TP-WANPunch · Note
• https://twitter.com/CVEnew/status/1865648992693998013 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1865662145574117379 · Twitter Post
• https://tp-link.com · Note
• https://vuldb.com/?ctiid.287261 · Note
• https://t.me/latest_high_impact_cve/1626 · Telegram Post
• https://t.me/cvedetector/12331 · Telegram Post
• https://vuldb.com/?id.287261 · Note
• https://t.me/cvenotify/103475 · Telegram Post
• https://vulners.com/cvelist/CVELIST:CVE-2024-12342 · Note
• https://twitter.com/ExCraft_labs/status/1927968556521488520 · Twitter Post