CVE-2026-3294
An authentication logic vulnerability in multiple TP-Link range extenders allows an unauthenticated attacker on an adjacent network to manipulate a login parameter and reset the administrator password due to insufficient validation. Successful exploitation allows an attacker to obtain full administrative control of the affected device, potentially impacting on confidentiality, integrity, and availability.
Schwachstellenklasse
An authentication logic vulnerability in multiple TP-Link range extenders allows an unauthenticated attacker on an adjacent network to manipulate a login parameter and reset the administrator password due to insufficient validation. Successful exploitation allows an attacker to obtain full administrative control of the affected device, potentially impacting on confidentiality, integrity, and availability.
Betroffene Produkte
- tp-link re305_firmware
- tp-link re305
- tp-link re360_firmware
- tp-link re360
- tp-link re580d_firmware
- tp-link re580d
- tp-link re650_firmware
- tp-link re650
Quellen
- https://www.tp-link.com/en/support/download/re305/v1/#Firmware
- https://www.tp-link.com/en/support/download/re360/v1/#Firmware
- https://www.tp-link.com/en/support/download/re580d/#Firmware
- https://www.tp-link.com/en/support/download/re650/v1/#Firmware
- https://www.tp-link.com/en/support/download/tl-wa860re/v4/#Firmware
- https://www.tp-link.com/us/support/download/re305/v1/#Firmware
Finden Sie die Schwachstelle, bevor es ein Angreifer tut.
Melden Sie sich mit GitHub an und starten Sie Ihr erstes Audit in weniger als einer Minute. Für den kostenlosen Plan ist keine Kreditkarte nötig.