PT-2022-6113 · Tp Link · Tp-Link Ax10V1

Published 2022-10-18 · Updated 2022-10-20 · CVE-2022-41541

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TP-Link AX10v1 version V1 211117

Description The issue allows attackers to execute a replay attack by using a previously transmitted encrypted authentication message and valid authentication token, enabling them to login to the web application as an admin user. This can be exploited by capturing and reusing valid authentication parameters, potentially leading to unauthorized access to protected information. It may also allow for a "man-in-the-middle" type attack.

Recommendations For TP-Link AX10v1 version V1 211117, as a temporary workaround, consider disabling the web application's authentication mechanism until a patch is available. Restrict access to the web interface to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-294

Related Identifiers

BDU:2023-00053

CVE-2022-41541

Affected Products

Tp-Link Ax10V1

References · 7

• 🔥 https://github.com/efchatz/easy-exploits/tree/main/Web/TP-Link/Replay · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-41541 · Security Note
• https://tp-link.com/us/support/download/archer-ax10/v1/#Firmware · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-41541 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-00053 · Security Note
• https://t.me/cibsecurity/51680 · Telegram Post
• https://github.com/advisories/GHSA-fh5v-7v62-vh5h · Note