Weak MD5 Hashing Vulnerability in TP-Link Router TL-WR940N
CVE-2023-23040

7.5HIGH

Key Information:

Vendor

Tp-link
Status
Tl-wr940n Firmware
Vendor
CVE Published:
22 February 2023

What is CVE-2023-23040?

The TP-Link TL-WR940N V6 3.19.1 Build 180119 router employs a deprecated MD5 hashing algorithm for the admin password used in basic authentication. This weak hashing technique renders the password susceptible to brute-force attacks, endangering the router's security. Users of this device should be aware of the potential risks and consider updating their firmware or adopting stronger security measures.

References

https://midist0xf.medium.com/tl-wr940n-uses-weak-md5-hash...
https://www.tp-link.com/en/support/download/tl-wr940n/#Fi...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.