From 87bd12a69fb44b073604fb094e1e651674463acc Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Sun, 8 Dec 2024 09:31:51 +0000 Subject: [PATCH] Publish GHSA-5qx6-f8xw-vj8f --- .../GHSA-5qx6-f8xw-vj8f.json | 52 +++++++++++++++++++ 1 file changed, 52 insertions(+) create mode 100644 advisories/unreviewed/2024/12/GHSA-5qx6-f8xw-vj8f/GHSA-5qx6-f8xw-vj8f.json diff --git a/advisories/unreviewed/2024/12/GHSA-5qx6-f8xw-vj8f/GHSA-5qx6-f8xw-vj8f.json b/advisories/unreviewed/2024/12/GHSA-5qx6-f8xw-vj8f/GHSA-5qx6-f8xw-vj8f.json new file mode 100644 index 00000000000..bc7d7f504e1 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-5qx6-f8xw-vj8f/GHSA-5qx6-f8xw-vj8f.json @@ -0,0 +1,52 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-5qx6-f8xw-vj8f", + "modified": "2024-12-08T09:30:25Z", + "published": "2024-12-08T09:30:25Z", + "aliases": [ + "CVE-2024-12342" + ], + "details": "A vulnerability was found in TP-Link VN020 F3v(T) TT_V6.2.1021. It has been rated as critical. This issue affects some unknown processing of the file /control/WANIPConnection of the component Incomplete SOAP Request Handler. The manipulation leads to denial of service. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12342" + }, + { + "type": "WEB", + "url": "https://github.com/Zephkek/TP-WANPunch/blob/main/README.md" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.287261" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.287261" + }, + { + "type": "WEB", + "url": "https://www.tp-link.com" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-404" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-08T07:15:04Z" + } +} \ No newline at end of file