CVE-2018-3948

HIGH EXPLOITED IN THE WILD

TP-Link TL-R600VPN Firmware - Denial of Service via URI Parsing

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2018-3948 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io).

Description

An exploitable denial-of-service vulnerability exists in the URI-parsing functionality of the TP-Link TL-R600VPN HTTP server. A specially crafted URL can cause the server to stop responding to requests, resulting in downtime for the management portal. An attacker can send either an unauthenticated or authenticated web request to trigger this vulnerability.

References (1)

Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
https://talosintelligence.com/vulnerability_reports/TALOS-2018-0617

Scores

CVSS v3 7.5
EPSS 0.0336
EPSS Percentile 87.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

VulnCheck KEV 2022-01-12
InTheWild.io 2021-11-11
CWE
CWE-20
Status published
Products (2)
tp-link/tl-r600vpn_firmware 1.3.0
tp-link/tl-r600vpn_firmware 1.2.3
Published Nov 30, 2018
Tracked Since Feb 18, 2026