CVE-2023-48724 HIGH

CVE-2023-48724

Vendor Tp-Link
Product AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)
Weakness CWE-121
Published April 9, 2024
Last update November 4, 2025
View on NVD All CVEs

CVSS base score

7.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

A memory corruption vulnerability exists in the web interface functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A specially crafted HTTP POST request can lead to denial of service of the device's web interface. An attacker can send an unauthenticated HTTP POST request to trigger this vulnerability.

Key dates

02Disclosure timeline

April 9, 2024 CVE published
November 4, 2025 Record updated