CVE-2024-12343highCWE-119CWE-120

CVE-2024-12343: falha de alta gravidade em TP-Link VN020 F3v(T)

TP-Link VN020 F3v(T) SOAP Request WANIPConnection buffer overflow

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar VN020 F3v

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.1epss 5.0%
A vulnerability classified as critical has been found in TP-Link VN020 F3v(T) TT_V6.2.1021. Affected is an unknown function of the file /control/WANIPConnection of the component SOAP Request Handler. The manipulation of the argument NewConnectionType leads to buffer overflow. The attack needs to be done within the local network. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Produtos afetados
TP-Link · VN020 F3v(T)
CVEs relacionadas — TP-Link VN020 F3v(T)

No mesmo produto, das mais perigosas para as menos.

CVE-2024-12342HIGHTP-Link VN020 F3v(T) Incomplete SOAP Request WANIPConnection denial of serviceEPSS 9.4%CVE-2024-11237HIGHTP-Link VN020 F3v(T) DHCP DISCOVER Packet Parser TP-Thumper stack-based overflowEPSS 5.3%CVE-2024-12344MEDIUMTP-Link VN020 F3v(T) FTP USER Command memory corruptionEPSS 1.9%