Security Advisory

CVE-2023-48724

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-04-09 14:12:47
Last updated 2025-11-04 18:19:15
Assigner talos
CVSS score 7.5
State PUBLISHED

Description

A memory corruption vulnerability exists in the web interface functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A specially crafted HTTP POST request can lead to denial of service of the device's web interface. An attacker can send an unauthenticated HTTP POST request to trigger this vulnerability.