CVE-2022-41541

Summary

TP-Link AX10v1 V1_211117 allows attackers to execute a replay attack by using a previously transmitted encrypted authentication message and valid authentication token. Attackers are able to login to the web application as an admin user.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://www.tp-link.com/us/support/download/archer-ax10/v1/#Firmware
• https://github.com/efchatz/easy-exploits/tree/main/Web/TP-Link/Replay

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

References

• https://www.tp-link.com/us/support/download/archer-ax10/v1/#Firmware
• https://github.com/efchatz/easy-exploits/tree/main/Web/TP-Link/Replay

• ←Previous
• Next→