TP-Link EAP225 Firmware vulnerabilities

12 CVEs affecting TP-Link EAP225 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-49913, published 2024-04-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-49074, published 2024-04-09. High severity, CVSS 7.5. EPSS: 13.5% chance of exploitation in the next 30 days. A denial of service vulnerability exists in the TDDP functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A specially crafted series of network…
CVE-2023-49913, published 2024-04-09. High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days. A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A…
CVE-2023-49906, published 2024-04-09. High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days. A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A…
CVE-2023-49912, published 2024-04-09. High severity, CVSS 8.8. EPSS: 1.8% chance of exploitation in the next 30 days. A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A…
CVE-2023-49911, published 2024-04-09. High severity, CVSS 8.8. EPSS: 1.8% chance of exploitation in the next 30 days. A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A…
CVE-2023-49910, published 2024-04-09. High severity, CVSS 8.8. EPSS: 1.8% chance of exploitation in the next 30 days. A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A…
CVE-2023-49909, published 2024-04-09. High severity, CVSS 8.8. EPSS: 1.8% chance of exploitation in the next 30 days. A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A…
CVE-2023-49908, published 2024-04-09. High severity, CVSS 8.8. EPSS: 1.8% chance of exploitation in the next 30 days. A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A…
CVE-2023-49907, published 2024-04-09. High severity, CVSS 8.8. EPSS: 1.8% chance of exploitation in the next 30 days. A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A…
CVE-2023-49134, published 2024-04-09. Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days. A command execution vulnerability exists in the tddpd enable_test_mode functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926 and Tp-Link N300…

Latest

CVE-2023-49133, published 2024-04-09. Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days. A command execution vulnerability exists in the tddpd enable_test_mode functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926 and Tp-Link N300…