Vulnerability · Published Dec 7, 2022 · Assigned by jpcert

CVE-2022-41783

Medium 5.5

In plain English

A medium-severity security flaw in TP-Link RE300 V1 from TP-Link. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 8% of all known vulnerabilities).

Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.2%top 92.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

tdpServer of TP-Link RE300 V1 improperly processes its input, which may allow an attacker to cause a denial-of-service (DoS) condition of the product's OneMesh function.

Affected products (as reported)

VendorProductVersions
TP-Link TP-Link RE300 V1 firmware versions prior to 221009

References