Vulnerability Description
TP-Link TL-WR1043ND V1 3.13.15 and earlier allows authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image during the firmware update process.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Tp-Link | Tl-Wr1043Nd V1 Firmware | <= 3.13.15 |
| Tp-Link | Tl-Wr1043Nd V1 | - |
Related Weaknesses (CWE)
References
- https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1hP34Hvj
- https://www.tp-link.com/us/press/security-advisory/Vendor Advisory
- https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1hP34Hvj
- https://www.tp-link.com/us/press/security-advisory/Vendor Advisory
FAQ
What is CVE-2022-46428?
CVE-2022-46428 is a vulnerability with a CVSS score of 4.8 (MEDIUM). TP-Link TL-WR1043ND V1 3.13.15 and earlier allows authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image during the firmware update...
How severe is CVE-2022-46428?
CVE-2022-46428 has been rated MEDIUM with a CVSS base score of 4.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-46428?
Check the references section above for vendor advisories and patch information. Affected products include: Tp-Link Tl-Wr1043Nd V1 Firmware, Tp-Link Tl-Wr1043Nd V1.