CVE-2022-46910

HIGH

TP-Link TL-WA901ND/TL-WA901N <v3.11.2/v3.12.16 - RCE/DoS

Title source: llm

Description

An issue in the firmware update process of TP-Link TL-WA901ND V1 up to v3.11.2 and TL-WA901N V2 up to v3.12.16 allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image.

References (2)

Core 2

Core References

Vendor Advisory

https://www.tp-link.com/us/press/security-advisory/

Various Sources

https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/BkwzORiDo

Scores

CVSS v3 8.8

EPSS 0.0065

EPSS Percentile 71.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact total

Details

Status published

Products (3)

tp-link/tl-wa901n_firmware < 3.11.2

tp-link/tl-wa901nd_v1_firmware < 3.11.2

tp-link/tl-wa901nd_v2_firmware < 3.12.16

Published Dec 20, 2022

Tracked Since Feb 18, 2026