{"id":"CVE-2024-12342","state":"PUBLISHED","title":"TP-Link VN020 F3v(T) Incomplete SOAP Request WANIPConnection denial of service","description":"A vulnerability was found in TP-Link VN020 F3v(T) TT_V6.2.1021. It has been rated as critical. This issue affects some unknown processing of the file /control/WANIPConnection of the component Incomplete SOAP Request Handler. The manipulation leads to denial of service. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may be used.","publishedAt":"2024-12-08T06:31:05.109Z","updatedAt":"2024-12-09T15:51:51.838Z","severity":{"score":7.1,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","source":"VulDB"},"assigner":"VulDB","products":["TP-Link VN020 F3v(T)"],"affected":[{"vendor":"TP-Link","product":"VN020 F3v(T)","versions":[{"version":"TT_V6.2.1021","status":"affected"}],"modules":["Incomplete SOAP Request Handler"]}],"references":["https://vuldb.com/?id.287261","https://vuldb.com/?ctiid.287261","https://github.com/Zephkek/TP-WANPunch/blob/main/README.md","https://www.tp-link.com/"],"weaknesses":["CWE-404"],"ingestedAt":"2026-10-29T20:06:50.777Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/12xxx/CVE-2024-12342.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-12342","state":"PUBLISHED","datePublished":"2024-12-08T06:31:05.109Z","dateUpdated":"2024-12-09T15:51:51.838Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2024-12-07T16:30:15.752Z"},"containers":{"cna":{"title":"TP-Link VN020 F3v(T) Incomplete SOAP Request WANIPConnection denial of service","descriptions":[{"lang":"en","value":"A vulnerability was found in TP-Link VN020 F3v(T) TT_V6.2.1021. It has been rated as critical. This issue affects some unknown processing of the file /control/WANIPConnection of the component Incomplete SOAP Request Handler. The manipulation leads to denial of service. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may be used."},{"lang":"de","value":"Eine Schwachstelle wurde in TP-Link VN020 F3v(T) TT_V6.2.1021 ausgemacht. Sie wurde als kritisch eingestuft. Es geht hierbei um eine nicht näher spezifizierte Funktion der Datei /control/WANIPConnection der Komponente Incomplete SOAP Request Handler. Durch das Manipulieren mit unbekannten Daten kann eine denial of service-Schwachstelle ausgenutzt werden. Der Angriff kann im lokalen Netzwerk angegangen werden. Der Exploit steht zur öffentlichen Verfügung."}],"affected":[{"vendor":"TP-Link","product":"VN020 F3v(T)","versions":[{"version":"TT_V6.2.1021","status":"affected"}],"modules":["Incomplete SOAP Request Handler"]}],"references":[{"url":"https://vuldb.com/?id.287261","name":"VDB-287261 | TP-Link VN020 F3v(T) Incomplete SOAP Request WANIPConnection denial of service","tags":["vdb-entry"]},{"url":"https://vuldb.com/?ctiid.287261","name":"VDB-287261 | CTI Indicators (IOB, IOC, IOA)","tags":["signature","permissions-required"]},{"url":"https://github.com/Zephkek/TP-WANPunch/blob/main/README.md","tags":["exploit"]},{"url":"https://www.tp-link.com/","tags":["product"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.1,"vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","baseSeverity":"HIGH"}},{"cvssV3_1":{"version":"3.1","baseScore":6.5,"vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":6.5,"vectorString":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":6.1,"vectorString":"AV:A/AC:L/Au:N/C:N/I:N/A:C"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-404","type":"CWE","lang":"en","description":"Denial of Service"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2024-12-08T06:31:05.109Z"},"timeline":[{"time":"2024-12-07T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2024-12-07T01:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2024-12-07T17:36:38.000Z","lang":"en","value":"VulDB entry last update"}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-12-09T15:51:34.082853Z","id":"CVE-2024-12342","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-12-09T15:51:51.838Z"}}]}}}