Arbitrary Code Execution and DoS Vulnerability in TP-Link TL-WR841N and TL-WA841ND Routers
CVE-2022-46912

8.8HIGH

Key Information:

Vendor

Tp-link
Status
Tl-wr841n Firmware
Vendor
CVE Published:
20 December 2022

What is CVE-2022-46912?

A significant vulnerability exists in the firmware update process of TP-Link TL-WR841N and TL-WA841ND V7 routers, affecting versions 3.13.9 and earlier. This flaw allows attackers to upload malicious firmware images, which can lead to arbitrary code execution or trigger a Denial of Service (DoS). Users of these router models are urged to review their firmware versions and consider updates to protect their networks against potential exploitation.

References

https://www.tp-link.com/us/press/security-advisory/
https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/Sk6sfbTPi

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.