PT-2022-13003 · Tp Link · Tp-Link Tl-Wr841N

Anurag M. Chevendra + 2 · Published 2022-02-09 · Updated 2022-02-18 · CVE-2022-0162

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TP-Link TL-WR841N version 3.16.9 Build 160325 Rel.62500n

Description The issue exists due to the transmission of authentication information in cleartext base64 format. This could allow a remote attacker to intercept credentials and subsequently perform administrative operations on the affected device through the web-based management interface.

Recommendations For TP-Link TL-WR841N version 3.16.9 Build 160325 Rel.62500n, consider disabling the web-based management interface until a patch is available to prevent remote attackers from intercepting credentials. Restrict access to the device's administrative operations to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2022-0162

Affected Products

Tp-Link Tl-Wr841N

References · 4

• https://osv.dev/vulnerability/CVE-2022-0162 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-0162 · Security Note
• https://t.me/cvenotify/26956 · Telegram Post
• https://cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2022-0068 · Note