PT-2022-5730 · Tp Link · Tp-Link Tl-Wr940N

Exluck · Published 2022-11-21 · Updated 2023-04-07 · CVE-2022-43635

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions TP-Link TL-WR940N version 3.20.1(US)

Description This issue allows network-adjacent attackers to disclose sensitive information on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from the incorrect implementation of the authentication algorithm, specifically within the httpd service. An attacker can leverage this to disclose stored credentials, leading to further compromise.

Recommendations For TP-Link TL-WR940N version 3.20.1(US), as a temporary workaround, consider restricting access to the httpd service until a patch is available. Additionally, avoid using the default TCP port 80 to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Weakness Enumeration

CWE-303

Related Identifiers

BDU:2022-07128

CVE-2022-43635

ZDI-22-1615

Affected Products

Tp-Link Tl-Wr940N

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-43635 · Security Note
• https://osv.dev/vulnerability/CVE-2022-43635 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-22-1615 · Security Note
• https://bdu.fstec.ru/vul/2022-07128 · Security Note