Authentication Bypass Vulnerability in TP-Link Routers

CVE-2022-43636

What is CVE-2022-43636?

This vulnerability in TP-Link TL-WR940N routers allows nearby attackers to bypass authentication mechanisms due to a flaw in the httpd service. The service, which operates on TCP port 80, suffers from insufficient randomness in session management sequence numbers. As a result, attackers can exploit this weakness to obtain unauthorized access to the router’s functionalities without needing prior authentication. Users are encouraged to consult the vendor for patches or mitigations.

References