TP-Link VX800v Denial-of-Service Vulnerability in SIP Processing
Vulnerability
A denial-of-service vulnerability has been identified in the TP-Link VX800v router, specifically in version 1.0. The issue arises from improper handling of exceptional conditions in Session Initiation Protocol (SIP) processing. This flaw allows an attacker to flood the device with crafted INVITE messages, effectively blocking all voice lines and disrupting incoming calls.
Impact
Exploitation of this vulnerability leads to a denial-of-service condition on VoIP communication, causing all voice lines to be blocked and disrupting incoming calls.
Remediation
Users are advised to update to the latest firmware version. The VX800v firmware can be downloaded from the TP-Link support page for this product.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.