CVE-2022-43636: TP-Link TL-WR940N httpd Use of Insufficiently Random Values Authentication Bypass Vulnerability
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of TP-Link TL-WR940N 6211111 3.20.1(US) routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from the lack of sufficient randomness in the sequnce numbers used for session managment. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-18334.
Other sources
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of TP-Link TL-WR940N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from the lack of sufficient randomness in the sequnce numbers used for session managment. An attacker can leverage this vulnerability to bypass authentication on the system.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this TP-Link TL-WR940N vulnerability?
The vulnerability ID for this TP-Link TL-WR940N vulnerability is CVE-2022-43636.
What is the severity of CVE-2022-43636?
CVE-2022-43636 has a severity rating of 8.8 (High).
How can an attacker exploit CVE-2022-43636?
Network-adjacent attackers can exploit CVE-2022-43636 to bypass authentication on affected installations of TP-Link TL-WR940N routers.
Do I need authentication to exploit CVE-2022-43636?
No, authentication is not required to exploit CVE-2022-43636.
Is there a fix available for CVE-2022-43636?
At the time of writing, no specific fix information is available for CVE-2022-43636. It is recommended to follow the provided reference for any updates or patches.