Vulnerabilityhigh

TP-Link fixes 2 RCE flaws in TL

Security Affairsby @securityaffairsNov 20, 2018 · 11:34 UTC (Nov 20, 2018)2 min read2 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2018-3950 CVE-2018-3951 CVE-2018-3948 CVE-2018-3949

Tags: cve-2018-3950 cve-2018-3951 cve-2018-3948 cve-2018-3949 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2018-3948	An exploitable denial-of-service vulnerability exists in the URI-parsing functionality of the TP-Link TL-R600VPN HTTP server	7.5	23%	PoC	Nov 30, 2018
CVE-2018-3950 +2 related CVEs CVE-2018-3949 CVE-2018-3951	An exploitable remote code execution vulnerability exists in the ping and tracert functionality of the TP-Link TL-R600VPN HWv3 FRNv1.3.0 and HWv2 FRNv1.2.3…	8.8 group max	3%	PoC	Dec 1, 2018

From the original article

2 min read at securityaffairs.com

TP-Link has addressed several vulnerabilities, including a remote code execution flaw, in its TL-R600VPN small and home office (SOHO) router. TP-Link as fixed four security vulnerabilities in the TL-R600VPN small and home office (SOHO) router that were reported by experts at Cisco Talos.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.