Lucene search
HistoryDec 20, 2022 - 8:15 p.m.
CVE-2022-46435
tp-link
firmware update
vulnerability
denial of service
arbitrary code
cve-2022-46435
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
61.7%
An issue in the firmware update process of TP-Link TL-WR941ND V2/V3 up to 3.13.9 and TL-WR941ND V4 up to 3.12.8 allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image.
Affected configurations
Node
tp-linktl-wr941nd_v2_firmwareRange≤3.13.9
tp-linktl-wr941nd_v2Match-
Node
tp-linktl-wr941nd_v3_firmwareRange≤3.13.9
tp-linktl-wr941nd_v3Match-
Node
tp-linktl-wr941nd_v4_firmwareRange≤3.12.8
tp-linktl-wr941nd_v4Match-
Related
cve
cve
CVE-2022-46435
2022-12-20 20:15:10
prion
prion
Design/Logic Flaw
2022-12-20 20:15:00
cvelist
cvelist
CVE-2022-46435
2022-12-20 00:00:00
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
61.7%
Related for NVD:CVE-2022-46435