6.3
CVE-2024-37662
- EPSS 0.05%
- Veröffentlicht 17.06.2024 18:15:17
- Zuletzt bearbeitet 06.06.2025 17:09:55
- Quelle cve@mitre.org
- Teams Watchlist Login
- Unerledigt Login
TP-LINK TL-7DR5130 v1.0.23 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same WLAN as the victim can disconnect or hijack the traffic between the victim and any remote server by sending out forged TCP RST messages to evict NAT mappings in the router.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Tp-link ≫ Tl-7dr5130 Firmware Version1.0.23
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.05% | 0.153 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 6.3 | 1.5 | 4.7 |
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H
|
CWE-940 Improper Verification of Source of a Communication Channel
The product establishes a communication channel to handle an incoming request that has been initiated by an actor, but it does not properly verify that the request is coming from the expected origin.