CVE-2024-46341

HIGH

Tp-link Tl-wr845n Firmware - Insufficiently Protected Credentials

Title source: rule

Description

TP-Link TL-WR845N(UN)_V4_190219 was discovered to transmit credentials in base64 encoded form, which can be easily decoded by an attacker executing a man-in-the-middle attack.

References (1)

[Third Party Advisory] https://security.iiita.ac.in/iot/base64-authorization.docx

Scores

CVSS v3 8.0

EPSS 0.0008

EPSS Percentile 23.7%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

CWE

CWE-522

Status published

Affected Products (1)

tp-link/tl-wr845n_firmware

Timeline

Published Dec 10, 2024

Tracked Since Feb 18, 2026