by Kastro
Paper/Archive/CVE-2022-0162

CVE-2022-0162

TP-Link TL-WR841N — Vulnerability in TP-LinK TL-WR841N wireless router

EPSS 0.7%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 52.0.520 × 2010.4No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

The vulnerability exists in TP-Link TL-WR841N V11 3.16.9 Build 160325 Rel.62500n wireless router due to transmission of authentication information in cleartextbase64 format. Successful exploitation of this vulnerability could allow a remote attacker to intercept credentials and subsequently perform administrative operations on the affected device through web-based management interface.

Affected

ProductAffectedFixed inSource
TL-WR841NV11 3.16.9 Build 160325 Rel.62500n–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CERT-In (CNA)8.4CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refcert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2022-0068