CVE-2022-48194

🗓️ 30 Dec 2022 07:07:15Reported by mitreType

TP-Link TL-WR902AC devices V3 0.9.1 allows remote attackers to execute arbitrary code or cause a DoS via inadequate signature check

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 9
Packet Storm	TP-Link TL-WR902AC Remote Code Execution	3 Apr 202300:00	–	packetstorm
RedhatCVE	CVE-2022-48194	23 May 202500:28	–	redhatcve
Cvelist	CVE-2022-48194	30 Dec 202200:00	–	cvelist
NVD	CVE-2022-48194	30 Dec 202207:15	–	nvd
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Tp-Link Tl-Wr902Ac Firmware	29 Dec 202210:32	–	githubexploit
Prion	Code injection	30 Dec 202207:15	–	prion
Exploit DB	TP-Link TL-WR902AC firmware 210730 (V3) - Remote Code Execution (RCE) (Authenticated)	1 Apr 202300:00	–	exploitdb
0day.today	TP-Link TL-WR902AC firmware 210730 (V3) - Remote Code Execution (Authenticated) Exploit	2 Apr 202300:00	–	zdt
Vulnrichment	CVE-2022-48194	30 Dec 202200:00	–	vulnrichment

Nvd

Node

tp-link tl-wr902ac_firmwareRange≤3.0.9.1

AND

tp-link tl-wr902acMatch3.0

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/171623/TP-Link-TL-WR902AC-Remote-Code-Execution.html
github	www.github.com/otsmr/internet-of-vulnerable-things/tree/main/exploits

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

30 Dec 2022 07:15Current

8.7High risk

Vulners AI Score8.7

CVSS38.8

EPSS0.69719

SSVC

CWE-434