Exploit / PoCcritical

"Classic" bugs open TP-Link's SafeStream Gigabit Broadband VPN Router to attack

Help Net Securityby @zeljkazorzNov 20, 2018 · 00:00 UTC (Nov 20, 2018)1 min read2 · 1 read

Read at helpnetsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2018-3948 CVE-2018-3949 CVE-2018-3950 CVE-2018-3951

Tags: cve-2018-3948 cve-2018-3949 cve-2018-3950 cve-2018-3951 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2018-3948	An exploitable denial-of-service vulnerability exists in the URI-parsing functionality of the TP-Link TL-R600VPN HTTP server	7.5	23%	PoC	Nov 30, 2018
CVE-2018-3950 +2 related CVEs CVE-2018-3949 CVE-2018-3951	An exploitable remote code execution vulnerability exists in the ping and tracert functionality of the TP-Link TL-R600VPN HWv3 FRNv1.3.0 and HWv2 FRNv1.2.3…	8.8 group max	3%	PoC	Dec 1, 2018

From the original article

1 min read at helpnetsecurity.com

Cisco Talos researchers have flagged four serious vulnerabilities in TP-Link’s SafeStream Gigabit Broadband VPN Router (TL-R600VPN). All four affect the device’s HTTP server, and can lead to denial of service, information disclosure, and remote code execution. The flaws affect TP-Link TL-R600VPN, hardware versions 2 and 3.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.