CVE-2023-27359— TP-Link AX1800 hotplugd Firewall Rule Race Condition Vulnerability
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2023-27359
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
TP-Link AX1800 hotplugd Firewall Rule Race Condition Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
TP-Link AX1800 hotplugd Firewall Rule Race Condition Vulnerability. This vulnerability allows remote attackers to gain access to LAN-side services on affected installations of TP-Link Archer AX21 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the hotplugd daemon. The issue results from firewall rule handling that allows an attacker access to resources that should be available to the LAN interface only. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the root user. . Was ZDI-CAN-19664.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
使用共享资源的并发执行不恰当同步问题(竞争条件)
Source: NVD (National Vulnerability Database)
Vulnerability Title
TP-LINK AX1800 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
TP-LINK AX1800是中国普联（TP-LINK）公司的一款双频 Wi-Fi 6 路由器。 TP-LINK AX1800 存在安全漏洞，该漏洞源于hotplugd 守护进程中存在竞争条件，允许攻击者访问 LAN 接口可用的资源。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2023-27359
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-27359
请登录查看更多情报信息。
Same Patch Batch · TP-Link · 2024-05-03 · 11 CVEs total
| CVE-2023-39471 | TP-Link TL-WR841N ated_tp Command Injection Remote Code Execution Vulnerability | |
| CVE-2023-35717 | TP-Link Tapo C210 Password Recovery Authentication Bypass Vulnerability | |
| CVE-2023-41184 | TP-Link Tapo C210 ActiveCells Stack-based Buffer Overflow Remote Code Execution Vulnerabil | |
| CVE-2023-44448 | TP-Link Archer A54 libcmm.so dm_fillObjByStr Stack-based Buffer Overflow Remote Code Execu | |
| CVE-2023-44447 | TP-Link TL-WR902AC loginFs Improper Authentication Information Disclosure Vulnerability | |
| CVE-2023-27332 | TP-Link Archer AX21 tdpServer Logging Stack-based Buffer Overflow Remote Code Execution Vu | |
| CVE-2023-27333 | TP-Link Archer AX21 tmpServer Command 0x422 Stack-based Buffer Overflow Remote Code Execut | |
| CVE-2023-27346 | TP-Link AX1800 Firmware Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerab | |
| CVE-2023-50224 | TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability | |
| CVE-2023-50225 | TP-Link TL-WR902AC dm_fillObjByStr Stack-based Buffer Overflow Remote Code Execution Vulne |
IV. Related Vulnerabilities
Same vendor: TP-Link
- CVE-2025-40634
Stack-based buffer overflow in TP-Link Archer AX50 - CVE-2025-3442
Information Disclosure Vulnerability in TP-Link Tapo IoT Sma - CVE-2025-1099
Information Disclosure Vulnerability in TP-Link Tapo C500 Wi - CVE-2025-0730
TP-Link TL-SG108E HTTP GET Request usr_account_set.cgi get r - CVE-2025-0729
TP-Link TL-SG108E clickjacking
V. Comments for CVE-2023-27359
No comments yet