CVE-2022-0162 Vulnerability in TP-LinK TL-WR841N wireless router
Remote attackers can intercept cleartext credentials to gain administrative access to the TP-Link TL-WR841N router.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-0162?
CVE-2022-0162 is a high-severity vulnerability in TP-Link TL-WR841N, published on 9 Feb 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The vulnerability exists in TP-Link TL-WR841N V11 3.16.9 Build 160325 Rel.62500n wireless router due to transmission of authentication information in cleartextbase64 format. Successful exploitation of this vulnerability could allow a remote attacker to intercept credentials and subsequently perform administrative operations on the affected device through web-based management interface.
Weakness: CWE-319
Which versions are affected by CVE-2022-0162?
It affects 1 product.
Products include Tp-Link Tl-Wr841n Firmware.
How do I fix CVE-2022-0162?
No fix has been published for CVE-2022-0162 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-0162 being exploited?
There is no known exploitation of CVE-2022-0162 in the wild and no public exploit code.
Other vulnerabilities in TP-Link TL-WR841N
Sources
Also known as GHSA-g9x3-h7c3-fr29.