Vulnetix
Try Vulnetix Request Demo
CVE-2018-5393 PUBLISHED CVSS 9.800000190734863 CRITICAL

The TP-LINK EAP Controller is TP-LINK's software for remotely controlling wireless access point devices. It utilizes a Java remote method invocation (RMI) service for remote control. The RMI interface does not require any authentication before use, so it lacks user authentication for RMI service commands in EAP controller versions 2.5.3 and earlier. Remote attackers can implement deserialization attacks through the RMI protocol. Successful attacks may allow a remote attacker to remotely control the target server and execute Java functions or bytecode.

EPSS 15.74% · 94.7th percentile

Risk Scores

CVSS v3.0
9.800000190734863
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
15.74%
94.7th percentile

Affected Products

VendorProductVersions
tp-linkeap_controller0
TP-LINKEAP Controller2.5.3

Timeline

References

Open in Interactive Console →