CVE-2024-12342

TP-Link VN020 F3v(T) Incomplete SOAP Request WANIPConnection denial of service

State: Published
Severity: 7.1 High
Published: Dec 8, 2024
Updated: Dec 9, 2024
Reserved: Dec 7, 2024

Description

A vulnerability was found in TP-Link VN020 F3v(T) TT_V6.2.1021. It has been rated as critical. This issue affects some unknown processing of the file /control/WANIPConnection of the component Incomplete SOAP Request Handler. The manipulation leads to denial of service. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may be used.

Scores

CVSS	Score	Vector	Source
4.0	7.1 High	CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N	VulDB
3.1	6.5 Medium	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	VulDB
3.0	6.5 Medium	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	VulDB
2.0	6.1 Medium	AV:A/AC:L/Au:N/C:N/I:N/A:C	VulDB

Weaknesses

CWE-404 Denial of Service

Affected Products

Product	Versions
VN020 F3v(T)TP-Link	TT_V6.2.1021Affected

References

VDB-287261 | TP-Link VN020 F3v(T) Incomplete SOAP Request WANIPConnection denial of servicevdb-entry
VDB-287261 | CTI Indicators (IOB, IOC, IOA)signaturepermissions-required
https://github.com/Zephkek/TP-WANPunch/blob/main/README.mdexploit
https://www.tp-link.com/product

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.