Vulnerability · Published Feb 9, 2022 · Assigned by CERT-In

CVE-2022-0162Vulnerability in TP-LinK TL-WR841N wireless router

High 8.4

In plain English

A high-severity security flaw in TL-WR841N from TP-Link. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 52% of all known vulnerabilities).

Severity (CVSS 3.1)8.4High
Exploit odds (30 days)0.7%top 47.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

The vulnerability exists in TP-Link TL-WR841N V11 3.16.9 Build 160325 Rel.62500n wireless router due to transmission of authentication information in cleartextbase64 format. Successful exploitation of this vulnerability could allow a remote attacker to intercept credentials and subsequently perform administrative operations on the affected device through web-based management interface.

Affected products (as reported)

VendorProductVersions
TP-Link TL-WR841N V11 3.16.9 Build 160325 Rel.62500n

Weakness: CWE-319 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References