漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
TP-Link Archer C3200 V1 and Archer C2 V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. They forward ARP requests, which are sent as broadcast packets, between the host and the guest networks. To use this leakage as a direct covert channel, the sender can trivially issue an ARP request to an arbitrary computer on the network. (In general, some routers restrict ARP forwarding only to requests destined for the network's subnet mask, but these routers did not restrict this traffic in any way. Depending on this factor, one must use either the lower 8 bits of the IP address, or the entire 32 bits, as the data payload.)
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
TP-Link Archer C3200和Archer C2 输入验证错误漏洞
Vulnerability Description
TP-Link Archer C3200和Archer C2都是中国普联(TP-Link)公司的一款无线路由器。 TP-Link Archer C3200 V1版本和Archer C2 V1版本中存在安全漏洞,该漏洞源于程序没有充分隔离同一设备上的主人网络和访客网络。攻击者可通过发送特制的ARP请求利用该漏洞在同一设备的两个隔离网段间传输数据。
CVSS Information
N/A
Vulnerability Type
N/A