CVE-2021-28857

Name of the Vulnerable Software and Affected Versions: TL-WPA4220 version 4.0.2 Build 20180308 Rel.37064

Description: The issue concerns the transmission of sensitive information, specifically the username and password, via a cookie. This could potentially expose user credentials to unauthorized access.

Recommendations: For TL-WPA4220 version 4.0.2 Build 20180308 Rel.37064, consider restricting access to the device until a fix is available, and avoid using the device for sensitive operations. As a temporary workaround, consider disabling the use of cookies for authentication until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.