PT-2022-5834 · Tp Link · Tp-Link Tl-Wr740N

Mrempy · Published 2022-09-06 · Updated 2022-12-07 · CVE-2022-4296

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions TP-Link TL-WR740N (affected versions not specified)

Description A problematic vulnerability has been found in the ARP Handler component, leading to resource consumption when manipulated. The attack must be carried out within the local network. The issue is related to the implementation of the Address Resolution Protocol (ARP) in the TP-Link TL-WR740N router's firmware, which can cause uncontrolled resource consumption. This could allow an attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Resource Exhaustion

Improper Resource Release

Weakness Enumeration

CWE-400

CWE-404

Related Identifiers

BDU:2022-07247

CVE-2022-4296

Affected Products

Tp-Link Tl-Wr740N

References · 5

• 🔥 https://youtube.com/watch?v=D--fb-cesmA · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-4296 · Security Note
• https://bdu.fstec.ru/vul/2022-07247 · Security Note
• https://github.com/advisories/GHSA-ppxj-vprv-272m · Note
• https://vuldb.com/?id.214812 · Note