Vulnerability · Published Dec 8, 2024 · Assigned by VulDB
CVE-2024-12342TP-Link VN020 F3v(T) Incomplete SOAP Request WANIPConnection denial of service
Medium 6.5
In plain English
A medium-severity security flaw in VN020 F3v(T) from TP-Link. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 9.4% (higher than 95% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Official description
A vulnerability was found in TP-Link VN020 F3v(T) TT_V6.2.1021. It has been rated as critical. This issue affects some unknown processing of the file /control/WANIPConnection of the component Incomplete SOAP Request Handler. The manipulation leads to denial of service. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may be used.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| TP-Link | VN020 F3v(T) | TT_V6.2.1021 |
Weakness: CWE-404 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
- VDB-287261 | TP-Link VN020 F3v(T) Incomplete SOAP Request WANIPConnection denial of service vdb-entry
- VDB-287261 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
- https://github.com/Zephkek/TP-WANPunch/blob/main/README.md exploit
- https://www.tp-link.com/ product