CVE-2021-3125
Description
In TP-Link TL-XDR3230 < 1.0.12, TL-XDR1850 < 1.0.9, TL-XDR1860 < 1.0.14, TL-XDR3250 < 1.0.2, TL-XDR6060 Turbo < 1.1.8, TL-XDR5430 < 1.0.11, and possibly others, when IPv6 is used, a routing loop can occur that generates excessive network traffic between an affected device and its upstream ISP's router. This occurs when a link prefix route points to a point-to-point link, a destination IPv6 address belongs to the prefix and is not a local IPv6 address, and a router advertisement is received with at least one global unique IPv6 prefix for which the on-link flag is set.
How to fix
- tp-link tl-xdr3230_firmware1.0.12 or later
- tp-link tl-xdr5430_firmware1.0.11 or later
- tp-link tl-xdr3250_firmware1.0.2 or later
- tp-link tl-xdr1860_firmware1.0.14 or later
- tp-link tl-xdr1850_firmware1.0.9 or later
- tp-link tl-xdr6060_firmware1.1.8 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tp-link tl-xdr3230_firmware | v < 1.0.12 | 1.0.12 |
| tp-link tl-xdr5430_firmware | v < 1.0.11 | 1.0.11 |
| tp-link tl-xdr3250_firmware | v < 1.0.2 | 1.0.2 |
| tp-link tl-xdr1860_firmware | v < 1.0.14 | 1.0.14 |
| tp-link tl-xdr1850_firmware | v < 1.0.9 | 1.0.9 |
| tp-link tl-xdr6060_firmware | v < 1.1.8 | 1.1.8 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.