PT-2025-8752 · Tp Link · Tp-Link Tl-Wr845N

Published 2025-02-26 · Updated 2025-03-19 · CVE-2024-57040

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TP-Link TL-WR845N versions TL-WR845N(UN) V4 200909 through TL-WR845N(UN) V4 190219

Description A hardcoded password for the root account was discovered, which can be obtained via a brute force attack.

Recommendations For versions TL-WR845N(UN) V4 200909 through TL-WR845N(UN) V4 190219, consider changing the default root password to a strong and unique one as soon as possible to prevent unauthorized access.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2024-57040

Affected Products

Tp-Link Tl-Wr845N

References · 15

• https://osv.dev/vulnerability/CVE-2024-57040 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-57040 · Security Note
• https://t.me/cvedetector/18961 · Telegram Post
• https://t.me/pentestingnews/57968 · Telegram Post
• https://twitter.com/the_yellow_fall/status/1901452411144986700 · Twitter Post
• https://twitter.com/udilev/status/1902291587373183041 · Twitter Post
• https://twitter.com/adriananglin/status/1901541877913890893 · Twitter Post
• https://twitter.com/samilaiho/status/1901646901906112648 · Twitter Post
• https://twitter.com/fofabot/status/1901597646474850720 · Twitter Post
• https://twitter.com/securityweekly/status/1902351012796530905 · Twitter Post
• https://security.iiita.ac.in/iot/hashed_password.pdf · Note
• https://t.me/cvenotify/113358 · Telegram Post
• https://twitter.com/CVEnew/status/1898276797021929837 · Twitter Post
• https://twitter.com/syedaquib77/status/1901486525604671910 · Twitter Post
• https://twitter.com/The_Cyber_News/status/1901534905038975060 · Twitter Post