CVE-2024-37662

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-37662
TP-LINK TL-7DR5130 v1.0.23 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same WLAN as the victim can disconnect or hijack the traffic between the victim and any remote server by sending out forged TCP RST messages to evict NAT mappings in the router.

6.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.5 / Impact : 4.7

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/ouuan/router-vuln-report/blob/master/nat-rst/tl-7dr5130-nat-rst.md Exploit Third Party Advisory
https://github.com/ouuan/router-vuln-report/blob/master/nat-rst/tl-7dr5130-nat-rst.md Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:tp-link:tl-7dr5130_firmware:1.0.23:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:tl-7dr5130:-:*:*:*:*:*:*:*
History

06 Jun 2025, 17:09

Type Values Removed Values Added
CPE cpe:2.3:o:tp-link:tl-7dr5130_firmware:1.0.23:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:tl-7dr5130:-:*:*:*:*:*:*:*
References () https://github.com/ouuan/router-vuln-report/blob/master/nat-rst/tl-7dr5130-nat-rst.md - () https://github.com/ouuan/router-vuln-report/blob/master/nat-rst/tl-7dr5130-nat-rst.md - Exploit, Third Party Advisory
First Time Tp-link tl-7dr5130 Firmware
Tp-link tl-7dr5130
Tp-link

21 Nov 2024, 09:24

Type Values Removed Values Added
References () https://github.com/ouuan/router-vuln-report/blob/master/nat-rst/tl-7dr5130-nat-rst.md - () https://github.com/ouuan/router-vuln-report/blob/master/nat-rst/tl-7dr5130-nat-rst.md -

14 Aug 2024, 14:35

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.3
CWE CWE-940

20 Jun 2024, 12:44

Type Values Removed Values Added
Summary
  • (es) TP-LINK TL-7DR5130 v1.0.23 es vulnerable a TCP DoS o ataques de secuestro. Un atacante en la misma WLAN que la víctima puede desconectar o secuestrar el tráfico entre la víctima y cualquier servidor remoto enviando mensajes TCP RST falsificados para desalojar las asignaciones NAT en el enrutador.

17 Jun 2024, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-06-17 18:15

Updated : 2025-06-06 17:09

NVD link : CVE-2024-37662

Mitre link : CVE-2024-37662

CVE.ORG link : CVE-2024-37662

JSON object : View

Products Affected

tp-link

  • tl-7dr5130_firmware
  • tl-7dr5130
CWE
CWE-940

Improper Verification of Source of a Communication Channel