CVE-2022-46910: High severity tp-link tl-wa901n vulnerability

Published Dec 20, 2022
·
Updated

An issue in the firmware update process of TP-Link TL-WA901ND V1 up to v3.11.2 and TL-WA901N V2 up to v3.12.16 allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image.

Affected Software

15 affected components
TP-Link Tl-wa901n Firmware<=3.11.2
TP-Link TL-WA901N
TP-Link Tl-wa901nd V1 Firmware<=3.11.2
TP-Link TL-WA901ND V1
TP-Link Tl-wa901n Firmware>=3.12.0<=3.12.16
TP-Link Tl-wa901nd V2 Firmware<=3.12.16
TP-Link Tl-wa901nd V2
All of the following
TP-Link Tl-wa901n Firmware<=3.11.2
TP-Link TL-WA901N
All of the following
TP-Link Tl-wa901nd V1 Firmware<=3.11.2
TP-Link TL-WA901ND V1
All of the following
TP-Link Tl-wa901n Firmware>=3.12.0<=3.12.16
TP-Link TL-WA901N
All of the following
TP-Link Tl-wa901nd V2 Firmware<=3.12.16
TP-Link Tl-wa901nd V2

Event History

Dec 20, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2022-46910?

CVE-2022-46910 has a high severity rating due to its potential to allow arbitrary code execution and Denial of Service (DoS).

2

How do I fix CVE-2022-46910?

To mitigate CVE-2022-46910, update the TP-Link TL-WA901ND V1 or TL-WA901N V2 to the latest firmware versions beyond 3.11.2 and 3.12.16 respectively.

3

What devices are affected by CVE-2022-46910?

CVE-2022-46910 affects TP-Link TL-WA901ND V1 up to firmware version 3.11.2 and TL-WA901N V2 up to firmware version 3.12.16.

4

Can CVE-2022-46910 be exploited remotely?

Yes, CVE-2022-46910 can be exploited remotely by uploading a crafted firmware image.

5

What are the potential consequences of CVE-2022-46910?

The exploitation of CVE-2022-46910 can lead to arbitrary code execution on affected devices or cause a Denial of Service (DoS).

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203