A denial of service vulnerability exists in the TDDP functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A specially crafted series of network requests can lead to reset to factory settings. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability.
Advisories
Source ID Title
EUVD EUVD EUVD-2023-53094 A denial of service vulnerability exists in the TDDP functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A specially crafted series of network requests can lead to reset to factory settings. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Tue, 04 Nov 2025 19:30:00 +0000


Tue, 04 Nov 2025 19:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Thu, 21 Aug 2025 18:00:00 +0000

Type Values Removed Values Added
First Time appeared Tp-link
Tp-link eap225
Tp-link eap225 Firmware
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:h:tp-link:eap225:v3:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:eap225_firmware:5.1.0:*:*:*:*:*:*:*
Vendors & Products Tp-link
Tp-link eap225
Tp-link eap225 Firmware

cve-icon MITRE

Status: PUBLISHED

Assigner: talos

Published:

Updated: 2025-11-04T18:19:33.189Z

Reserved: 2023-11-21T14:38:31.718Z

Link: CVE-2023-49074

cve-icon Vulnrichment

Updated: 2025-11-04T18:19:33.189Z

cve-icon NVD

Status : Modified

Published: 2024-04-09T15:15:28.800

Modified: 2025-11-04T19:16:08.427

Link: CVE-2023-49074

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.