| 제목 | TP-Link VN020 F3v(T) ISP Routers Hardware Version: 1.0 / Firmware Version: TT_V6.2.1021 Memory Corruption & DOS |
|---|
| 설명 | Two critical vulnerabilities identified in the UPnP implementation of TP-Link VN020-F3v(T) specifically affecting routers deployed by Tunisie Telecom and Topnet and other variants in Algeria and Morocoo. These vulnerabilities allow unauthenticated attackers to cause a DOS and memory corruption remotely and unauthenticated through a single malformed SOAP request over UPnP, this affects firmware version TT_V6.2.1021 which is running UPnP version: UPnP/1.0 BLR-TX4S/1.0, analysis has been done based on the routers behavior and network inspection and it's been tested on the tunisian variants of this router and this is confirmed to also exist on the maghreb and algerian versions, due to the same ISPs using the same vulnerable firmware build just with rebranding for this router more detailed analysis in the advisory. |
|---|
| 원천 | ⚠️ https://github.com/Zephkek/TP-WANPunch/blob/main/README.md |
|---|
| 사용자 | Mohamed Maatallah (UID 77278) |
|---|
| 제출 | 2024. 11. 17. PM 09:23 (2 연령 ago) |
|---|
| 모더레이션 | 2024. 12. 07. PM 05:31 (20 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 287262 [TP-Link VN020 F3v(T) TT_V6.2.1021 SOAP Request /control/WANIPConnection NewConnectionType 메모리 손상] |
|---|
| 포인트들 | 20 |
|---|