CVE-2021-28858

Name of the Vulnerable Software and Affected Versions: TL-WPA4220 version 4.0.2 Build 20180308 Rel.37064

Description: The issue concerns the lack of SSL usage by default, allowing an attacker on the local network to monitor traffic and capture sensitive information such as cookies.

Recommendations: For TL-WPA4220 version 4.0.2 Build 20180308 Rel.37064, consider enabling SSL to encrypt the traffic and protect sensitive information. As a temporary workaround, restrict access to the local network to minimize the risk of exploitation.