CVE-2024-22733

TP Link MR200 V4 Firmware version 210201 was discovered to contain a null-pointer-dereference in the web administration panel on /cgi/login via the sign, Action or LoginStatus query parameters which could lead to a denial of service by a local or remote unauthenticated attacker.

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v3.1

3.5 LOWCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

EPSS

0.61% chance of exploitation in the next 30 days, 47th percentile

Published

2024-11-01

Updated

2024-11-05

Proof-of-concept exploits (1)

• https://lenoctambule.dev/post/dos-on-tp-link-web-admin-panel

References

• CVE Record
• NVD entry

Related

• CVE-2024-22729
• CVE-2024-22734
• CVE-2024-22723
• CVE-2024-2274
• CVE-2024-22722
• CVE-2024-22749