Vulnerability · Published Dec 8, 2024 · Assigned by VulDB
CVE-2024-12344TP-Link VN020 F3v(T) FTP USER Command memory corruption
Medium 6.3
In plain English
A medium-severity memory corruption in VN020 F3v(T) from TP-Link. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.9% (higher than 79% of all known vulnerabilities).
Severity (CVSS 3.1)6.3Medium
Exploit odds (30 days)1.9%top 20.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A vulnerability, which was classified as critical, was found in TP-Link VN020 F3v(T) TT_V6.2.1021. This affects an unknown part of the component FTP USER Command Handler. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| TP-Link | VN020 F3v(T) | TT_V6.2.1021 |
Weakness: CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
References
- VDB-287265 | TP-Link VN020 F3v(T) FTP USER Command memory corruption vdb-entry
- VDB-287265 | CTI Indicators (IOB, IOC) signature, permissions-required
- Submit #452658 | TP-Link VN020 F3v(T) Hardware Version: 1.0 / Firmware Version: TT_V6.2.1021 Buffer Overflow & Memory corruption third-party-advisory
- https://github.com/Zephkek/TP-1450 exploit
- https://www.tp-link.com/ product