PT-2026-79112 · Tp Link Systems+1 · Dr3150 V1+34
CVSS v4.0
6.0
Medium
| Vector | AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
An unauthenticated attacker with network access to the captive portal service of an affected device can terminate active captive portal sessions, including forcing logout of specific users or clearing all active sessions. Affected users must re-authenticate to regain access.
Successful exploitation may allow termination of individual or all active captive portal sessions, causing temporary service disruption and requiring users to re-authenticate.
Fix
Missing Authentication
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Dr3150 V1
Dr3220V-4G V1
Dr3650V V1
Dr3650V-4G V1
Er603Wp-4G-Outdoor V1
Er605 V2
Er605W V2
Er701-5G-Outdoor V1
Er703Wp-4G-Outdoor V1
Er706W V1
Er706W-4G V1
Er706W-4G V2
Er706Wp-4G V1
Er707-M2 V1
Er7206 V2
Er7212Pc V2
Er7406 V1
Er7412-M2 V1
Er8411 V1
Dr3150 Firmware
Dr3220V-4G Firmware
Dr3650V-4G Firmware
Dr3650V Firmware
Er603Wp-4G-Outdoor Firmware
Er605 Firmware
Er701-5G-Outdoor Firmware
Er703Wp-4G-Outdoor Firmware
Er706W-4G Firmware
Er706W Firmware
Er707-M2 Firmware
Er7206 Firmware
Er7212Pc Firmware
Er7406 Firmware
Er7412-M2 Firmware
Er8411 Firmware