Replay Attack Vulnerability in TP-Link AX10 Router

CVE-2022-41541

Summary

The TP-Link AX10 router is susceptible to a replay attack, where attackers can exploit a previously transmitted encrypted authentication message along with a valid authentication token. This vulnerability enables unauthorized access, allowing attackers to log in to the web application as an admin user. Consequently, it poses significant risks to the device’s security. Users are encouraged to update their firmware and adopt stronger authentication measures to mitigate potential threats.

References