CVE-2020-10916: TP-Link TL-WA855RE login.json Improper Authentication Privilege Escalation Vulnerability
First published: Thu May 07 2020(Updated: )
This vulnerability allows network-adjacent attackers to escalate privileges on affected installations of TP-Link TL-WA855RE Firmware Ver: 855rev4-up-ver1-0-1-P1[20191213-rel60361] Wi-Fi extenders. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the first-time setup process. The issue results from the lack of proper validation on first-time setup requests. An attacker can leverage this vulnerability to reset the password for the Admin account and execute code in the context of the device. Was ZDI-CAN-10003.
Credit: zdi-disclosures@trendmicro.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| TP-Link TL-WA855RE Firmware | ||
| TP-Link TL-WA855RE | =190408 | |
| TP-Link TL-WA855RE | =191213 | |
| TP-Link TL-WA855RE Firmware | =v4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2020-10916?
CVE-2020-10916 is rated as high severity due to the potential for privilege escalation by attackers.
How do I fix CVE-2020-10916?
To fix CVE-2020-10916, update the firmware of the TP-Link TL-WA855RE to the latest version available.
Which devices are affected by CVE-2020-10916?
CVE-2020-10916 affects TP-Link TL-WA855RE Wi-Fi extenders running specific firmware versions 190408 and 191213.
Can CVE-2020-10916 be exploited without authentication?
No, CVE-2020-10916 requires authentication, but the existing mechanism can be bypassed.
What are the consequences of exploiting CVE-2020-10916?
Exploitation of CVE-2020-10916 could lead to unauthorized privilege escalation on the affected devices.
- agent/severity
- agent/author
- agent/title
- agent/weakness
- agent/event
- agent/type
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/zdi-advisory
- alias/ZDI-20-553
- alias/ZDI-CAN-10003
- alias/CVE-2020-10916
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/references
- vendor/tp-link
- canonical/tp-link tl-wa855re firmware
- canonical/tp-link tl-wa855re
- version/tp-link tl-wa855re/190408
- version/tp-link tl-wa855re/191213
- version/tp-link tl-wa855re firmware/v4