CVE-2022-41540

The web app client of TP-Link AX10v1 V1211117 uses hard-coded cryptographic keys when communicating with the router. Attackers who are able to intercept the communications between the web client and router through a man-in-the-middle attack can then obtain the sequence key via a brute-force attac...

CVE-2022-41541

TP-Link AX10v1 V1211117 allows attackers to execute a replay attack by using a previously transmitted encrypted authentication message and valid authentication token. Attackers are able to login to the web application as an admin user...

Authentication flaw

TP-Link AX10v1 V1211117 allows attackers to execute a replay attack by using a previously transmitted encrypted authentication message and valid authentication token. Attackers are able to login to the web application as an admin user...

CVE-2022-41541

TP-Link AX10v1 (firmware V1_211117) is vulnerable to a replay attack where an attacker reuses a previously encrypted authentication message and valid token, enabling login to the web admin interface. The available sources confirm the authentication flaw and admin access possibility; no explicit e...

CVE-2022-41540

CVE-2022-41540 affects the TP-Link AX10v1 web app client for V1_211117, where the client uses hard-coded cryptographic keys when talking to the router. This enables a man-in-the-middle attacker to brute-force the sequence key and potentially access sensitive information. Public details indicate a...

PT-2022-6113 · Tp Link · Tp-Link Ax10V1

Name of the Vulnerable Software and Affected Versions: TP-Link AX10v1 version V1 211117 Description: The issue allows attackers to execute a replay attack by using a previously transmitted encrypted authentication message and valid authentication token, enabling them to login to the web applicati...

TP-Link AX10 Configuration Error Vulnerability

TP-Link AX10 is a router from China P&L Tp-link. A misconfiguration vulnerability exists in the TP-Link AX10v1 that stems from an HTTP/1.1 misconfiguration in the web interface of the TP-Link AX10v1 that could allow an attacker to send specially crafted HTTP/0.9 packets, which could lead to a cac...

CVE-2021-41451

CVE-2021-41451 affects the TP-Link AX10v1 router web interface. The root cause is a misconfiguration in handling HTTP/1.0 and HTTP/1.1, enabling a remote unauthenticated attacker to send a crafted HTTP request and receive a misconfigured HTTP/0.9 response, potentially leading to cache poisoning. ...

CVE-2021-41450

An HTTP request smuggling attack in TP-Link AX10v1 before v1211117 allows a remote unauthenticated attacker to DoS the web application via sending a specific HTTP packet...