CVE-2023-30307

This covers a set of TP-LINK routers, the TL-R473GP-AC, XDR6020, TL-R479GP-AC, TL-R4239G, TL-WAR1200L, and TL-R476G, where a session-fixation-class weakness lets attackers hijack TCP sessions, which can lead to a denial of service. The impact is availability-only and rated moderate; the outcome is disruption of sessions rather than data theft or code execution. Notably, our batch record for this entry has empty vendor and product metadata even though the description names the affected models.

TCP session hijacking leading to DoS is a disruption issue, not a takeover, and it is bounded accordingly, an attacker can interrupt connectivity but doesn't gain control of the device or its data through this alone. Routers are heavily scanned, but availability-only bugs draw less weaponization than credential or code-execution flaws, so the realistic risk is targeted disruption rather than broad botnet conscription.

Two things shape our handling. First, the empty vendor/product fields mean our automated matching won't catch this, so it needs the model list read out of the description and reconciled against our network-gear inventory manually. Second, given the availability-only impact, we rank it moderate and focus on whether any of these specific TP-LINK models sit in exposed positions where session disruption would actually hurt.