PT-2022-27874

CVE-2022-46435

·

تاريخ النشر

2022-12-20

·

تاريخ التحديث

2022-12-28

الوصف من

CVSS 3.1
8.8
عالية
المقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions TP-Link TL-WR941ND V2/V3 versions 3.13.9 and earlier TP-Link TL-WR941ND V4 versions 3.12.8 and earlier
Description An issue in the firmware update process allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image.
Recommendations For TP-Link TL-WR941ND V2/V3 versions 3.13.9 and earlier, update to a version later than 3.13.9 to resolve the issue. For TP-Link TL-WR941ND V4 versions 3.12.8 and earlier, update to a version later than 3.12.8 to resolve the issue. As a temporary workaround, consider restricting access to the firmware update process until a patch is available.
قابلية الاستغلال
استغلال
إصلاح
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾