Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x67c-x34f-8f4w

Опубликовано: 18 дек. 2021
Источник: github
Github: Не прошло ревью

Описание

An HTTP/1.1 misconfiguration in web interface of TP-Link AX10v1 before V1_211117 could allow an attacker to send a specially crafted HTTP/0.9 packet that could cause a cache poisoning attack.

An HTTP/1.1 misconfiguration in web interface of TP-Link AX10v1 before V1_211117 could allow an attacker to send a specially crafted HTTP/0.9 packet that could cause a cache poisoning attack.

EPSS

Процентиль: 91%
0.06833
Низкий

Дефекты

CWE-444

Связанные уязвимости

CVSS3: 7.5
nvd
около 4 лет назад

A misconfiguration in HTTP/1.0 and HTTP/1.1 of the web interface in TP-Link AX10v1 before V1_211117 allows a remote unauthenticated attacker to send a specially crafted HTTP request and receive a misconfigured HTTP/0.9 response, potentially leading into a cache poisoning attack.

EPSS

Процентиль: 91%
0.06833
Низкий

Дефекты

CWE-444