CVE-2022-43636: TP-Link TL-WR940N httpd Use of Insufficiently Random Values Authentication Bypass Vulnerability
First published: Wed Mar 29 2023(Updated: )
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of TP-Link TL-WR940N 6_211111 3.20.1(US) routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from the lack of sufficient randomness in the sequnce numbers used for session managment. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-18334.
Credit: zdi-disclosures@trendmicro.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| TP-Link TL-WR940N | ||
| Tp-link Tl-wr940n Firmware | =6_211111_3.20.1 | |
| TP-Link TL-WR940N |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this TP-Link TL-WR940N vulnerability?
The vulnerability ID for this TP-Link TL-WR940N vulnerability is CVE-2022-43636.
What is the severity of CVE-2022-43636?
CVE-2022-43636 has a severity rating of 8.8 (High).
How can an attacker exploit CVE-2022-43636?
Network-adjacent attackers can exploit CVE-2022-43636 to bypass authentication on affected installations of TP-Link TL-WR940N routers.
Do I need authentication to exploit CVE-2022-43636?
No, authentication is not required to exploit CVE-2022-43636.
Is there a fix available for CVE-2022-43636?
At the time of writing, no specific fix information is available for CVE-2022-43636. It is recommended to follow the provided reference for any updates or patches.
- agent/type
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/weakness
- agent/author
- agent/references
- agent/severity
- agent/title
- agent/softwarecombine
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- collector/zdi-advisory
- source/ZDI
- alias/ZDI-22-1614
- alias/ZDI-CAN-18334
- alias/CVE-2022-43636
- agent/software-canonical-lookup
- agent/tags
- agent/event
- agent/trending
- vendor/tp-link
- canonical/tp-link tl-wr940n firmware
- version/tp-link tl-wr940n firmware/6_211111_3.20.1
- canonical/tp-link tl-wr940n