vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2021-3125

HIGH
7.5
CVSS Score
Published: April 12, 2021 at 05:41 PM UTC
Updated: June 17, 2026 at 04:04 AM UTC
12 products affected across 1 vendorTl XDR6060 FirmwareTl XDR3250 FirmwareTl XDR3230 Firmware

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.5
Exploit prediction
EPSS 2%

Description

In TP-Link TL-XDR3230 < 1.0.12, TL-XDR1850 < 1.0.9, TL-XDR1860 < 1.0.14, TL-XDR3250 < 1.0.2, TL-XDR6060 Turbo < 1.1.8, TL-XDR5430 < 1.0.11, and possibly others, when IPv6 is used, a routing loop can occur that generates excessive network traffic between an affected device and its upstream ISP's router. This occurs when a link prefix route points to a point-to-point link, a destination IPv6 address belongs to the prefix and is not a local IPv6 address, and a router advertisement is received with at least one global unique IPv6 prefix for which the on-link flag is set.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Tl XDR1850 Firmware· TP-Link
95%
v < 1.0.9
Affected range stops below 1.0.9, so it looks safe — our inference, not a vendor statement
tp-link-tl-xdr1850 (same device)
Tl XDR1860 Firmware· TP-Link
95%
v < 1.0.14
Affected range stops below 1.0.14, so it looks safe — our inference, not a vendor statement
tp-link-tl-xdr1860 (same device)
Tl XDR3230 Firmware· TP-Link
95%
v < 1.0.12
Affected range stops below 1.0.12, so it looks safe — our inference, not a vendor statement
tp-link-tl-xdr3230 (same device)
Tl XDR3250 Firmware· TP-Link
95%
v < 1.0.2
Affected range stops below 1.0.2, so it looks safe — our inference, not a vendor statement
tp-link-tl-xdr3250 (same device)
Tl XDR5430 Firmware· TP-Link
95%
v < 1.0.11
Affected range stops below 1.0.11, so it looks safe — our inference, not a vendor statement
tp-link-tl-xdr5430 (same device)
Tl XDR6060 Firmware· TP-Link
95%
v < 1.1.8
Affected range stops below 1.1.8, so it looks safe — our inference, not a vendor statement
tp-link-tl-xdr6060 (same device)
Tl-Xdr1850· TP-Linkdevice
80%
All versions
Tl-Xdr1860· TP-Linkdevice
80%
All versions
Tl-Xdr3230· TP-Linkdevice
80%
All versions
Tl-Xdr3250· TP-Linkdevice
80%
All versions

References (6)

x_refsource_MISCVendor Advisory
Source: [email protected]
https://service.tp-link.com.cn/detail_download_8719.html
x_refsource_MISCVendor Advisory
Source: [email protected]
https://service.tp-link.com.cn/detail_download_8720.html
x_refsource_MISCVendor Advisory
Source: [email protected]
https://service.tp-link.com.cn/detail_download_8722.html
x_refsource_MISCVendor Advisory
Source: [email protected]
https://service.tp-link.com.cn/detail_download_8723.html
x_refsource_MISCVendor Advisory
Source: [email protected]
https://service.tp-link.com.cn/detail_download_8724.html
x_refsource_MISCVendor Advisory
Source: [email protected]
https://service.tp-link.com.cn/detail_download_8725.html

CVSS

7.5HIGH[email protected]
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-834

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card