CVE-2023-43135

9.8 criticalEPSS 0.9%

Critical (9.8) in tp-link tl-er5120g firmware. EPSS 0.9% chance of exploitation in the next 30 days.

There is an unauthorized access vulnerability in TP-LINK ER5120G 4.0 2.0.0 Build 210817 Rel.80868n, which allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-31)
CWE: CWE-862
Published: 2023-09-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

tp-link:tl-er5120g_firmware

References

https://github.com/7R4C4R/CVE/blob/main/TPLINK-TL-ER5120G/unauthorized%20access/Unauthorized%20Access%20Vulnerability.md
https://github.com/7R4C4R/CVE/blob/main/TPLINK-TL-ER5120G/unauthorized%20access/Unauthorized%20Access%20Vulnerability.md

Check your stack JSON