RE300's (v1) online update is not working!

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

RE300's (v1) online update is not working!

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
RE300's (v1) online update is not working!
RE300's (v1) online update is not working!
2022-11-30 01:10:14
Model: RE300  
Hardware Version: V1
Firmware Version: 1.0.8 Build 20211126 Rel. 67847(7480)

I received an email from the Japanese Security Agency (JPCERT) telling me that there was a security flaw in RE300 and that I should update it.
So I went to RE300 and pressed the online update button, but even though I could have updated it manually using the update file, it tells me that firmware is updated and did not work at all. It's quite dangerous as user might trust automatic online update, but how come this function is not working? TP-Link fail to operate to publish the firmware online?

  0      
  0      
#1
Options
3 Reply
Re:RE300's (v1) online update is not working!
2022-11-30 08:41:25
You sure that email from "Japanese Security Agency" was not a spam email? Why would they email you and not TP Link?
BT Full fibre 500, 1x X60 V3.2 in router mode and 1 x XE75Pro V2.
  0  
  0  
#2
Options
Re:RE300's (v1) online update is not working!
2022-11-30 18:24:04

  @klipse 

Thank you for your consideration. However, I am a security expert and am confident that this email is not spam.
 

This security issue has already been fixed in the latest firmware and is reserved for CVE-2022-41783 on the CVE (Common Vulnerabilities and Exposures) site, which can be found in English at the following keyword "TP-Link RE300 V1 tdpServer vulnerable to improper processing of its input"

That's not what I'm trying to point out, but rather that even though there is such a issue and it has already been fixed with the latest firmware, TP-Link's online update feature does not apply that latest firmware?

 

Thanks in advance.

  1  
  1  
#3
Options
Re:RE300's (v1) online update is not working!
2022-12-07 07:35:52

  @shizuka2 

Hi, welcome to the community.

Thanks a lot for the feedback.

There are different methods to release official firmware. The online firmware upgrade is one of them.

The firmware RE300_V1_22201009 hasn't been uploaded to the cloud server yet and so far, it could not be detected during the online upgrade.

Thank you very much.

Best regards.

  0  
  0  
#4
Options