Design/Logic Flaw

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n 5553 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which...

CVE-2022-24972

CVE-2022-24972 affects the TP-Link TL-WR940N, version 3.20.1 Build 200316 Rel.34392n (5553). The vulnerability is in the httpd service listening on port 80, caused by a lack of proper access control, enabling network-adjacent attackers to disclose stored credentials without authentication. Report...