Authentication flaw

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of TP-Link TL-WR940N 6211111 3.20.1US routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by...

CVE-2022-43636

TP-Link TL-WR940N (version 3.20.1(US)) is affected by CVE-2022-43636. The httpd service on port 80 uses insufficiently random session identifiers, enabling network-adjacent attackers to bypass authentication. Impact is authenticated bypass with high severity; no exploit details provided in the so...

CVE-2022-43636

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of TP-Link TL-WR940N 6211111 3.20.1US routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by...