CVE-2022-40486

CVE-2022-40486 affects TP-Link Archer AX10 V1 with firmware 1.3.1 Build 20220401 Rel. 57450(5553). A crafted backup file can let an authenticated attacker execute arbitrary code, likely via the device’s backup/restore mechanism. Exploitation details are provided in associated PoCs and disclosures...

TP-Link AX10 Input Validation Error Vulnerability

TP-Link AX10, a router from Tp-link, is vulnerable to an input validation error in TP-Link AX10 v1. The vulnerability stems from the fact that the product does not effectively handle special HTTP messages. An attacker could cause a denial of service to the target through this vulnerability...