High · 8.1 CVE-2022-41541 EUVD-2022-44734GHSA-fh5v-7v62-vh5h

TP-Link AX10v1 V1_211117 allows attackers to execute a replay attack by using a previously transmitted encrypted authentication message and…

Published Oct 18, 2022 · Updated May 15, 2025 · Assigned by mitre

Description

TP-Link AX10v1 V1_211117 allows attackers to execute a replay attack by using a previously transmitted encrypted authentication message and valid authentication token. Attackers are able to login to the web application as an admin user.

References

https://www.tp-link.com/us/support/download/archer-ax10/v1/#Firmware
https://github.com/efchatz/easy-exploits/tree/main/Web/TP-Link/Replay