Vulnerability in some TP-Link routers could lead to factory reset

Summary: Cisco Talos disclosed 10 vulnerabilities over three weeks, including four in the TP-Link AC1350 wireless router, one of which (CVE-2023-49074) lets unauthenticated packets to the TDDP protocol force a factory reset, though TDDP is only reachable for roughly 15 minutes after a reboot. The same batch covers command execution and remote code execution flaws in the TP-Link device, arbitrary file creation or overwrite and denial of service in Open Automation Software's OAS Platform, and out-of-bounds write vulnerabilities in AMD's Radeon DirectX 11 user mode driver that could allow guest-to-host escape.
What's compelling: The TP-Link reset flaw needs no authentication and the router is built for home networks, so the exposure lands on remote workers and small offices rather than a hardened data center. The AMD driver issues can be triggered from guest machines in virtualization environments, which puts the boundary between a compromised VM and its host in scope.

Read the original at Cisco Talos ↗