CVE-2022-46432

high

Description

An exploitable firmware modification vulnerability was discovered on TP-Link TL-WR743ND V1. An attacker can conduct a MITM (Man-in-the-Middle) attack to modify the user-uploaded firmware image and bypass the CRC check, allowing attackers to execute arbitrary code or cause a Denial of Service (DoS). This affects v3.12.20 and earlier.

References

https://www.tp-link.com/us/press/security-advisory/

https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/B1Vgv1uwo

Details

Source: Mitre, NVD

Published: 2022-12-20

Updated: 2023-11-07

Risk Information

CVSS v2

Base Score: 7.6

Vector: CVSS2#AV:N/AC:H/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H