CVE-2024-12342CWE-404

TP-Link VN020 F3v(T) Incomplete SOAP Request WANIPConnection denial of service

High · published December 8, 2024

CVSS v4.0
7.1
EPSS
9%
Percentile
95.4
In the wild
Unconfirmed
What it is

A vulnerability was found in TP-Link VN020 F3v(T) TT_V6.2.1021. It has been rated as critical. This issue affects some unknown processing of the file /control/WANIPConnection of the component Incomplete SOAP Request Handler. The manipulation leads to denial of service. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may be used.

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.09366 · 95.4th percentile
Weakness
CWE-404 · Improper Resource Shutdown or Release
Published
2024-12-08T06:31Z
EPSS history
Timeline
  • 08 DEC 06:31Z
    TP-Link VN020 F3v(T) Incomplete SOAP Request WANIPConnection denial of service
    cvelistv5