CVE-2023-49133

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A command execution vulnerability exists in the tddpd enable_test_mode functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926 and Tp-Link N300 Wireless Access Point (EAP115 V4) v5.0.4 Build 20220216. A specially crafted series of network requests can lead to arbitrary command execution. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability.This vulnerability impacts `uclited` on the EAP225(V3) 5.1.0 Build 20220926 of the AC1350 Wireless MU-MIMO Gigabit Access Point.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-829 CWE-77

Affected software

Vendor	Product	Versions
Tp-Link	AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)	v5.1.0 Build 20220926
Tp-Link	N300 Wireless Access Point (EAP115)	v5.0.4 Build 20220216
tp-link	ac1350_firmware	v5.1.0_build_20220926
tp-link	n300_firmware	v5.0.4_build_20220216

References

https://talosintelligence.com/vulnerability_reports/TALOS-2023-1862Exploit, Third Party Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2023-1862Exploit, Third Party Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1862

Timeline

Published: Apr 9, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-491349.8A command execution vulnerability exists in the tddpd enable_test_mode functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point CVE-2023-491355.5in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released pointer.CVE-2023-49147.5Relative Path Traversal in GitHub repository cecilapp/cecil prior to 7.47.1.CVE-2023-491407.5Denial-of-service (DoS) vulnerability exists in commplex-link service of HMI GC-A2 series. If a remote unauthenticated attacker sends a spec CVE-2023-491417.8Improper isolation in some Intel(R) Processors stream cache mechanism may allow an authenticated user to potentially enable escalation of pr CVE-2023-491423.3in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia audio crash through modify a released pointer.CVE-2023-491437.5Denial-of-service (DoS) vulnerability exists in rfe service of HMI GC-A2 series. If a remote unauthenticated attacker sends a specially craf CVE-2023-491446.7Out of bounds read in OpenBMC Firmware for some Intel(R) Server Platforms before versions egs-1.15-0, bhs-0.27 may allow a privileged user t CVE-2023-491455.4Apache NiFi 0.7.0 through 1.23.2 include the JoltTransformJSON Processor, which provides an advanced configuration user interface that is vu CVE-2023-491466.1DOMSanitizer (aka dom-sanitizer) before 1.0.7 allows XSS via an SVG document because of mishandling of comments and greedy regular expressio CVE-2023-491477.8An issue was discovered in PDF24 Creator 11.14.0. The configuration of the msi installer file was found to produce a visible cmd.exe window CVE-2023-491488.8Cross-Site Request Forgery (CSRF) vulnerability in Kulwant Nagi Affiliate Booster – Pros & Cons, Notice, and CTA Blocks for Affiliates.This