CVE-2023-49074

High

Description

A denial of service vulnerability exists in the TDDP functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A specially crafted series of network requests can lead to reset to factory settings. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability.

SeverityHigh
CVSS7.4
Exploit probability—
ProductTp-link Eap225 Firmware
PublishedApr 9, 2024
First seenApr 9, 2024
Weakness typeCWE-749CWE-749

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
tp-link eap225_firmware5.1.0—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2023-49074 · Tp-link Eap225 Firmware · Dark Radar