Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-41540
HistoryOct 18, 2022 - 3:15 p.m.

Hardcoded credentials

2022-10-1815:15:00
PRIOn knowledge base
www.prio-n.com
1
tp-link ax10v1
hardcoded credentials
cryptographic keys
man-in-the-middle
brute-force attack
sensitive information

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.7%

The web app client of TP-Link AX10v1 V1_211117 uses hard-coded cryptographic keys when communicating with the router. Attackers who are able to intercept the communications between the web client and router through a man-in-the-middle attack can then obtain the sequence key via a brute-force attack, and access sensitive information.

CPENameOperatorVersion
ax10_firmwareeqv1-211117

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.7%

Related for PRION:CVE-2022-41540