CVE-2023-49074
HIGHTP-Link EAP225 V3 v5.1.0 Build 20220926 - Unauthenticated Denial of Service via TDDP Network Requests
Title source: llmDescription
A denial of service vulnerability exists in the TDDP functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A specially crafted series of network requests can lead to reset to factory settings. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability.
References (2)
Core 2
Core References
Exploit, Third Party Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2023-1861
Third Party Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1861
Scores
CVSS v3
7.4
EPSS
0.1348
EPSS Percentile
95.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-749
Status
published
Products (1)
tp-link/eap225_firmware
5.1.0
Published
Apr 09, 2024
Tracked Since
Feb 18, 2026