CVE-2022-41541

TP-Link AX10v1 (firmware V1_211117) is vulnerable to a replay attack where an attacker reuses a previously encrypted authentication message and valid token, enabling login to the web admin interface. The available sources confirm the authentication flaw and admin access possibility; no explicit e...

CVE-2022-41540

CVE-2022-41540 affects the TP-Link AX10v1 web app client for V1_211117, where the client uses hard-coded cryptographic keys when talking to the router. This enables a man-in-the-middle attacker to brute-force the sequence key and potentially access sensitive information. Public details indicate a...