High severity · published Apr 9, 2024
CVE-2023-49909
A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0…
8.8
CVSS
1.8%
EPSS
No
On KEV
Description
A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.This vulnerability refers specifically to the overflow that occurs via the `action` parameter at offset `0x0045ab38` of the `httpd_portal` binary shipped with v5.1.0 Build 20220926 of the EAP225.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AW
AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) · Tp-Link
v5.1.0 Build 20220926 · source: vendor
NW
N300 Wireless Access Point (EAP115) · Tp-Link
v5.0.4 Build 20220216 · source: vendor
EF
Eap225 Firmware · Tp-link
5.1.0 · source: NVD
AF
Ac1350 Firmware · Tp-link
v5.1.0_build_20220926 · source: CISA
NF
N300 Firmware · Tp-link
v5.0.4_build_20220216 · source: CISA
Affected product
AW
AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)
Tp-Link
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-49909
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-49909
Exploit
https://talosintelligence.com/vulnerability_reports/TALOS-2023-1888
www.talosintelligence.com
https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1888
More from AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)
9.8
CVE-2023-49134
A command execution vulnerability exists in the tddpd enable_test_mode functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926 and…
9.8
CVE-2023-49133
A command execution vulnerability exists in the tddpd enable_test_mode functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926 and…
8.8
CVE-2023-49913
A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0…
8.8
CVE-2023-49912
A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0…
8.8
CVE-2023-49911
A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0…