From 5f38664384fc3110f46838beec874b04cf9f4f31 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Sun, 8 Dec 2024 12:32:11 +0000
Subject: [PATCH] Publish GHSA-w44f-qrgh-jh53

---
 .../GHSA-w44f-qrgh-jh53.json                  | 56 +++++++++++++++++++
 1 file changed, 56 insertions(+)
 create mode 100644 advisories/unreviewed/2024/12/GHSA-w44f-qrgh-jh53/GHSA-w44f-qrgh-jh53.json

diff --git a/advisories/unreviewed/2024/12/GHSA-w44f-qrgh-jh53/GHSA-w44f-qrgh-jh53.json b/advisories/unreviewed/2024/12/GHSA-w44f-qrgh-jh53/GHSA-w44f-qrgh-jh53.json
new file mode 100644
index 00000000000..2995f030b25
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-w44f-qrgh-jh53/GHSA-w44f-qrgh-jh53.json
@@ -0,0 +1,56 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-w44f-qrgh-jh53",
+  "modified": "2024-12-08T12:30:45Z",
+  "published": "2024-12-08T12:30:45Z",
+  "aliases": [
+    "CVE-2024-12343"
+  ],
+  "details": "A vulnerability classified as critical has been found in TP-Link VN020 F3v(T) TT_V6.2.1021. Affected is an unknown function of the file /control/WANIPConnection of the component SOAP Request Handler. The manipulation of the argument NewConnectionType leads to buffer overflow. The attack needs to be done within the local network. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12343"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/Zephkek/TP-WANPunch/blob/main/README.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.287262"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.287262"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.446212"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.tp-link.com"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-119"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-08T10:15:04Z"
+  }
+}
\ No newline at end of file