Insecure UART Console Access in TP-Link Router

CVE-2022-29402

Summary

The TP-Link TL-WR840N EU v6.20 has a significant vulnerability due to inadequate protections on its UART console. This loophole enables attackers to gain unauthorized access to the UART port through a serial connection. By exploiting this flaw, intruders can execute commands as the root user without any form of authentication, posing a severe risk to network security and device integrity.

References