CVE-2022-46428

TP-Link TL-WR1043ND V1 3.13.15 and earlier allows authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image during the firmware update process.

Score

CVSS 3.1 4.8 Medium

Status

Modified - cve@mitre.org

Published

2022-12-20

Last modified

2025-04-16

Weaknesses

CWE-494

Affected products

• Tl-wr1043nd V1 Firmware (Tp-link)

References

• https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1hP34Hvj
• https://www.tp-link.com/us/press/security-advisory/