CVE-2022-46435

Name of the Vulnerable Software and Affected Versions TP-Link TL-WR941ND V2/V3 versions 3.13.9 and earlier TP-Link TL-WR941ND V4 versions 3.12.8 and earlier

Description An issue in the firmware update process allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image.

Recommendations For TP-Link TL-WR941ND V2/V3 versions 3.13.9 and earlier, update to a version later than 3.13.9 to resolve the issue. For TP-Link TL-WR941ND V4 versions 3.12.8 and earlier, update to a version later than 3.12.8 to resolve the issue. As a temporary workaround, consider restricting access to the firmware update process until a patch is available.