Vulnerability Description
An issue in the firmware update process of TP-LINK TL-WA801N / TL-WA801ND V1 v3.12.16 and earlier allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Tp-Link | Tl-Wa801N Firmware | <= 3.12.16 |
| Tp-Link | Tl-Wa801N | - |
| Tp-Link | Tl-Wa801Nd V1 Firmware | <= 3.12.16 |
| Tp-Link | Tl-Wa801Nd V1 | - |
References
- https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/BJ4czlpwi
- https://www.tp-link.com/us/press/security-advisory/Vendor Advisory
- https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/BJ4czlpwi
- https://www.tp-link.com/us/press/security-advisory/Vendor Advisory
FAQ
What is CVE-2022-46914?
CVE-2022-46914 is a vulnerability with a CVSS score of 8.8 (HIGH). An issue in the firmware update process of TP-LINK TL-WA801N / TL-WA801ND V1 v3.12.16 and earlier allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted ...
How severe is CVE-2022-46914?
CVE-2022-46914 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-46914?
Check the references section above for vendor advisories and patch information. Affected products include: Tp-Link Tl-Wa801N Firmware, Tp-Link Tl-Wa801N, Tp-Link Tl-Wa801Nd V1 Firmware, Tp-Link Tl-Wa801Nd V1.