CVE-2023-43135
First published: Wed Sep 20 2023(Updated: )
There is an unauthorized access vulnerability in TP-LINK ER5120G 4.0 2.0.0 Build 210817 Rel.80868n, which allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Tp-link Tl-er5120g Firmware | =2.0.0-build_210817 | |
| Tp-link Tl-er5120g | =4.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2023-43135?
CVE-2023-43135 is an unauthorized access vulnerability in TP-LINK ER5120G 4.0 2.0.0 Build 210817 Rel.80868n.
How does CVE-2023-43135 impact TP-LINK ER5120G?
CVE-2023-43135 allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management.
What is the severity of CVE-2023-43135?
CVE-2023-43135 has a severity rating of 9.8 (critical).
How can I fix CVE-2023-43135?
To fix CVE-2023-43135, update TP-LINK ER5120G to version 2.0.0 Build 210817 Rel.80868p or newer.
Where can I find more information about CVE-2023-43135?
More information about CVE-2023-43135 can be found at this link: [CVE-2023-43135](https://github.com/7R4C4R/CVE/blob/main/TPLINK-TL-ER5120G/unauthorized%20access/Unauthorized%20Access%20Vulnerability.md)
- collector/nvd-api
- collector/nvd-index
- agent/weakness
- agent/event
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/description
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/tp-link
- canonical/tp-link tl-er5120g firmware
- version/tp-link tl-er5120g firmware/2.0.0-build_210817
- canonical/tp-link tl-er5120g
- version/tp-link tl-er5120g/4.0