CVE-2022-29402

TP-Link TL-WR840N EU v6.20 was discovered to contain insecure protections for its UART console. This vulnerability allows attackers to connect to the UART port via a serial connection and execute commands as the root user without authentication.

Score

CVSS 3.1 6.8 Medium

Status

Modified - cve@mitre.org

Published

2022-05-25

Last modified

2024-08-03

Weaknesses

CWE-306

Affected products

• Tl-wr840n Firmware (Tp-link)

References

• https://k4m1ll0.com/cve-tplink-tlwr840N-uart-shell.html