CVE-2023-48724

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-48724
A memory corruption vulnerability exists in the web interface functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A specially crafted HTTP POST request can lead to denial of service of the device's web interface. An attacker can send an unauthenticated HTTP POST request to trigger this vulnerability.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://talosintelligence.com/vulnerability_reports/TALOS-2023-1864 Exploit Third Party Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2023-1864 Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:tp-link:eap225_firmware:5.1.0:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:eap225:v3:*:*:*:*:*:*:*
History

21 Aug 2025, 17:45

Type Values Removed Values Added
CWE CWE-787
First Time Tp-link eap225 Firmware
Tp-link
Tp-link eap225
References () https://talosintelligence.com/vulnerability_reports/TALOS-2023-1864 - () https://talosintelligence.com/vulnerability_reports/TALOS-2023-1864 - Exploit, Third Party Advisory
CPE cpe:2.3:h:tp-link:eap225:v3:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:eap225_firmware:5.1.0:*:*:*:*:*:*:*

21 Nov 2024, 08:32

Type Values Removed Values Added
Summary
  • (es) Existe una vulnerabilidad de corrupción de memoria en la funcionalidad de la interfaz web del punto de acceso Gigabit MU-MIMO inalámbrico Tp-Link AC1350 (EAP225 V3) v5.1.0 Build 20220926. Una solicitud HTTP POST especialmente manipulada puede provocar una denegación de servicio de la interfaz web del dispositivo. Un atacante puede enviar una solicitud HTTP POST no autenticada para desencadenar esta vulnerabilidad.
References () https://talosintelligence.com/vulnerability_reports/TALOS-2023-1864 - () https://talosintelligence.com/vulnerability_reports/TALOS-2023-1864 -

09 Apr 2024, 17:15

Type Values Removed Values Added
References
  • {'url': 'https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1864', 'source': 'talos-cna@cisco.com'}

09 Apr 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-09 15:15

Updated : 2025-08-21 17:45

NVD link : CVE-2023-48724

Mitre link : CVE-2023-48724

CVE.ORG link : CVE-2023-48724

JSON object : View

Products Affected

tp-link

  • eap225_firmware
  • eap225
CWE
CWE-121

Stack-based Buffer Overflow

CWE-787

Out-of-bounds Write