CVE-2024-50699

HIGH

TP-Link TL-WR845N Firmware - Insufficiently Protected Credentials

Title source: llm

Description

TP-Link TL-WR845N(UN)_V4_201214, TL-WR845N(UN)_V4_200909 and TL-WR845N(UN)_V4_190219 were discovered to contain weak default credentials for the Administrator account.

References (2)

Core 2

Core References

Exploit, Third Party Advisory

https://security.iiita.ac.in/iot/password-reset-missing-tplink.pdf

Third Party Advisory

https://security.iiita.ac.in/iot/base64-authorization.docx

Scores

CVSS v3 8.0

EPSS 0.0040

EPSS Percentile 31.5%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact total

Details

CWE

CWE-522

Status published

Products (3)

tp-link/tl-wr845n_firmware 190219

tp-link/tl-wr845n_firmware 200909

tp-link/tl-wr845n_firmware 201214

Published Dec 10, 2024

Tracked Since Feb 18, 2026