CVE-2024-46340: Critical severity tp-link wr845n firmware vulnerability
Published Dec 10, 2024
·Updated
TL-WR845N(UN)V4201214, TP-Link TL-WR845N(UN)V4200909, and TL-WR845N(UN)V4190219 was discovered to transmit user credentials in plaintext after executing a factory reset.
Affected Software
7 affected components
TP-Link TL-WR845N=V4_201214, =V4_200909, =V4_190219
All of the following
TP-Link Tl-wr845n Firmware=201214
TP-Link TL-WR845N=v4
All of the following
TP-Link Tl-wr845n Firmware=200909
TP-Link TL-WR845N=v4
All of the following
TP-Link Tl-wr845n Firmware=190219
TP-Link TL-WR845N=v4
Event History
Dec 10, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-46340?
CVE-2024-46340 is considered to have a high severity due to the transmission of user credentials in plaintext.
2
How do I fix CVE-2024-46340?
To mitigate CVE-2024-46340, update your TP-Link TL-WR845N firmware to the latest version provided by TP-Link.
3
What devices are affected by CVE-2024-46340?
CVE-2024-46340 affects TP-Link TL-WR845N models with firmware versions V4_201214, V4_200909, and V4_190219.
4
What types of information are compromised in CVE-2024-46340?
CVE-2024-46340 compromises user credentials as they are transmitted in plaintext after a factory reset.
5
Can CVE-2024-46340 be exploited remotely?
Yes, CVE-2024-46340 can potentially be exploited remotely if a user accesses the router after a factory reset.