TP-Link AX10v1 V1_211117 allows attackers to execute a replay attack by using a previously transmitted encrypted authentication message and valid authentication token. Attackers are able to login to the web application as an admin user.
References
| Link | Resource |
|---|---|
| https://github.com/efchatz/easy-exploits/tree/main/Web/TP-Link/Replay | Exploit Third Party Advisory |
| https://www.tp-link.com/us/support/download/archer-ax10/v1/#Firmware | Product Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
20 Oct 2022, 15:47
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.1 |
| CWE | CWE-294 | |
| References | (MISC) https://www.tp-link.com/us/support/download/archer-ax10/v1/#Firmware - Product, Vendor Advisory | |
| References | (MISC) https://github.com/efchatz/easy-exploits/tree/main/Web/TP-Link/Replay - Exploit, Third Party Advisory | |
| First Time |
Tp-link ax10 Firmware
Tp-link ax10 Tp-link |
|
| CPE | cpe:2.3:h:tp-link:ax10:1.0:*:*:*:*:*:*:* cpe:2.3:o:tp-link:ax10_firmware:v1_211117:*:*:*:*:*:*:* |
18 Oct 2022, 16:00
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-10-18 15:15
Updated : 2023-12-10 14:35
NVD link : CVE-2022-41541
Mitre link : CVE-2022-41541
CVE.ORG link : CVE-2022-41541
JSON object : View
Products Affected
tp-link
- ax10_firmware
- ax10
CWE
CWE-294
Authentication Bypass by Capture-replay