PT-2024-9331 · Tp Link · Tp-Link Vn020 F3V
Mohamed Maatallah
·
Published
2024-12-08
·
Updated
2024-12-10
·
CVE-2024-12343
CVSS v3.1
8.8
High
| Vector | AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
TP-Link VN020 F3v(T) version TT V6.2.1021
Description:
A critical vulnerability has been found in the TP-Link VN020 F3v(T) router. The issue is related to the SOAP Request Handler component, specifically an unknown function of the file /control/WANIPConnection. The manipulation of the
NewConnectionType argument leads to a buffer overflow. The attack must be performed within the local network. The exploit has been disclosed to the public and may be used. This vulnerability can be exploited by an attacker to cause a denial of service.Recommendations:
For TP-Link VN020 F3v(T) version TT V6.2.1021, as a temporary workaround, consider disabling the SOAP Request Handler component until a patch is available. Restrict access to the /control/WANIPConnection file to minimize the risk of exploitation. Avoid using the
NewConnectionType argument in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Tp-Link Vn020 F3V