Exploitation Summary
EIP tracks 2 public exploits for CVE-2024-12342. PoCs published by Mohamed Maatallah, becrevex.
AI-analyzed exploit summary This exploit demonstrates two DoS vulnerabilities in TP-Link VN020-F3v(T) router's UPnP service via malformed SOAP requests. The first PoC triggers a DoS by omitting required parameters, while the second causes potential memory corruption with an oversized payload.
Description
A vulnerability was found in TP-Link VN020 F3v(T) TT_V6.2.1021. It has been rated as critical. This issue affects some unknown processing of the file /control/WANIPConnection of the component Incomplete SOAP Request Handler. The manipulation leads to denial of service. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may be used.
Exploits (2)
This exploit demonstrates two DoS vulnerabilities in TP-Link VN020-F3v(T) router's UPnP service via malformed SOAP requests. The first PoC triggers a DoS by omitting required parameters, while the second causes potential memory corruption with an oversized payload.
The repository contains functional exploit code for a Denial of Service (DoS) vulnerability in TP-Link VN020-F3v devices via a malformed SOAP request. The exploit sends a crafted XML payload with an excessively long hex string to trigger the vulnerability.
References (4)
Scores
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H