CVE-2026-3294
An authentication logic vulnerability in multiple TP-Link range extenders allows an unauthenticated attacker on an adjacent network to manipulate a login parameter and reset the administrator password due to insufficient validation. Successful exploitation allows an attacker to obtain full administrative control of the affected device, potentially impacting on confidentiality, integrity, and availability.
Zwakheid
An authentication logic vulnerability in multiple TP-Link range extenders allows an unauthenticated attacker on an adjacent network to manipulate a login parameter and reset the administrator password due to insufficient validation. Successful exploitation allows an attacker to obtain full administrative control of the affected device, potentially impacting on confidentiality, integrity, and availability.
Getroffen producten
- tp-link re305_firmware
- tp-link re305
- tp-link re360_firmware
- tp-link re360
- tp-link re580d_firmware
- tp-link re580d
- tp-link re650_firmware
- tp-link re650
Bronnen
- https://www.tp-link.com/en/support/download/re305/v1/#Firmware
- https://www.tp-link.com/en/support/download/re360/v1/#Firmware
- https://www.tp-link.com/en/support/download/re580d/#Firmware
- https://www.tp-link.com/en/support/download/re650/v1/#Firmware
- https://www.tp-link.com/en/support/download/tl-wa860re/v4/#Firmware
- https://www.tp-link.com/us/support/download/re305/v1/#Firmware
Vind de bug voordat een aanvaller dat doet.
Log in met GitHub en start je eerste audit binnen een minuut. Voor het gratis abonnement is geen creditcard nodig.