CVE-2024-50699

HIGH

Tp-link Tl-wr845n Firmware - Insufficiently Protected Credentials

Title source: rule

Description

TP-Link TL-WR845N(UN)_V4_201214, TL-WR845N(UN)_V4_200909 and TL-WR845N(UN)_V4_190219 were discovered to contain weak default credentials for the Administrator account.

References (2)

[Exploit, Third Party Advisory] https://security.iiita.ac.in/iot/password-reset-missing-tplink.pdf

[Third Party Advisory] https://security.iiita.ac.in/iot/base64-authorization.docx

Scores

CVSS v3 8.0

EPSS 0.0020

EPSS Percentile 42.3%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

CWE

CWE-522

Status published

Affected Products (3)

tp-link/tl-wr845n_firmware

Timeline

Published Dec 10, 2024

Tracked Since Feb 18, 2026