Lucene search
PRIOn knowledge basePRION:CVE-2022-24972HistoryMar 28, 2023 - 7:15 p.m.
Design/Logic Flaw
2023-03-2819:15:00
PRIOn knowledge base
www.prio-n.com
4
vulnerability
network-adjacent
disclosure
sensitive information
tp-link
httpd service
tcp port 80
lack of access control
stored credentials
compromise
zdi-can-13911
nvd
0.001 Low
EPSS
Percentile
19.4%
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n (5553) routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from the lack of proper access control. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-13911.
| CPE | Name | Operator | Version |
|---|---|---|---|
| tl-wr940n_firmware | eq | 3.20.1 build-200316 |
Related
cvelist
cvelist
CVE-2022-24972
2023-03-28 00:00:00
nvd
nvd
CVE-2022-24972
2023-03-28 19:15:11
zdi
zdi
cve
cve
CVE-2022-24972
2023-03-28 19:15:11