Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-3125

In TP-Link TL-XDR3230 < 1.0.12, TL-XDR1850 < 1.0.9, TL-XDR1860 < 1.0.14, TL-XDR3250 < 1.0.2, TL-XDR6060 Turbo < 1.1.8, TL-XDR5430 < 1.0.11, and possibly others, when IPv6 is used, a routing loop can occur that generates excessive network traffic between an affected device and its upstream ISP's router. This occurs when a link prefix route points to a point-to-point link, a destination IPv6 address belongs to the prefix and is not a local IPv6 address, and a router advertisement is received with at least one global unique IPv6 prefix for which the on-link flag is set.

Published

2021-04-12T19:15:14.753

Last Modified

2024-11-21T06:20:56.520

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

8.6

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-834
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System tp-link tl-xdr3230_firmware < 1.0.12 Yes
Hardware tp-link tl-xdr3230 - No
Operating System tp-link tl-xdr5430_firmware < 1.0.11 Yes
Hardware tp-link tl-xdr5430 - No
Operating System tp-link tl-xdr3250_firmware < 1.0.2 Yes
Hardware tp-link tl-xdr3250 - No
Operating System tp-link tl-xdr1860_firmware < 1.0.14 Yes
Hardware tp-link tl-xdr1860 - No
Operating System tp-link tl-xdr1850_firmware < 1.0.9 Yes
Hardware tp-link tl-xdr1850 - No
Operating System tp-link tl-xdr6060_firmware < 1.1.8 Yes
Hardware tp-link tl-xdr6060 - No
References