PT-2020-12418 · Tp Link · Tp-Link Tl-Wa855Re

Published 2020-04-28 · Updated 2020-05-14 · CVE-2020-10916

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TP-Link TL-WA855RE Firmware version 855rev4-up-ver1-0-1-P1[20191213-rel60361]

Description This issue allows network-adjacent attackers to escalate privileges on affected installations of TP-Link TL-WA855RE Wi-Fi extenders. Although authentication is required to exploit this issue, the existing authentication mechanism can be bypassed. The specific flaw exists within the first-time setup process due to the lack of proper validation on first-time setup requests. An attacker can leverage this issue to reset the password for the Admin account and execute code in the context of the device.

Recommendations For TP-Link TL-WA855RE Firmware version 855rev4-up-ver1-0-1-P1[20191213-rel60361], as a temporary workaround, consider restricting access to the first-time setup process until a patch is available. Avoid using the vulnerable first-time setup feature to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2020-10916

ZDI-20-553

Affected Products

Tp-Link Tl-Wa855Re

References · 4

• https://zerodayinitiative.com/advisories/ZDI-20-553 · Security Note
• https://osv.dev/vulnerability/CVE-2020-10916 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-10916 · Security Note
• https://t.me/cvenotify/3659 · Telegram Post