Detections
Analytics
CVE-2025-29648
high
Description
SQL Injection vulnerability exists in the TP-Link EAP120 router s login dashboard (version 1.0), allowing an unauthenticated attacker to inject malicious SQL statements via the login fields. NOTE: this is disputed because the issue can only be reproduced on a supplier-provided emulator, where access control is intentionally absent for ease of functional testing.
References
https://github.com/TheVeteran1/Vulnerability-Research/blob/main/CVE-2025-29648