CVE-2026-102814: fallo de gravedad alta en TP-Link Systems Inc. RE305 v3
Improper Authentication in TP-Link TDDP v2 Allows Root Command Execution in TP-Link RE305
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 8.7epss 0.4%
An
authentication weakness exists in the TP-Link TDDP v2 service of TP-Link RE305
V3. TDDP v2 uses a fixed and derivable cryptographic key, which may allow an
unauthenticated attacker on the same local network to forge protocol packets
and access privileged TDDP operations, including functionality that can lead to
operating-system command execution when the TDDP service is running and
accessible.
Successful
exploitation may allow an unauthenticated attacker on the same local area
network to execute arbitrary system commands with root privileges.
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
TP-Link Systems Inc. · RE305 v3CVEs relacionadas — TP-Link Systems Inc. RE305 v3
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-102815MEDIUMCommand Injection in tmpServer Allows Local Privilege Escalation in TP-Link RE305EPSS 0.6%CVE-2026-18330MEDIUMHardcoded Shared RSA-1024 Private Key in Web Login in TP-Link RE305 and Archer C7EPSS 0.3%CVE-2026-102813MEDIUMAdministrator Password Reset Through the Verification-Code Interface in TP-Link RE305EPSS 0.2%CVE-2026-102816MEDIUMUnauthenticated Wireless Regulatory Region Configuration in TP-Link RE305EPSS 0.2%CVE-2026-102812MEDIUMHardcoded AES-128 Key and Fixed IV in Configuration Backup Encryption in TP-Link RE305 and Archer C7EPSS 0.1%