TP-Link Archer AX10 v1 Firmware vulnerabilities

2 CVEs affecting TP-Link Archer AX10 v1 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-40486, published 2022-09-28.

More from TP-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-40486, published 2022-09-28. High severity, CVSS 8.8. EPSS: 2.1% chance of exploitation in the next 30 days. TP Link Archer AX10 V1 Firmware Version 1.3.1 Build 20220401 Rel. 57450(5553) was discovered to allow authenticated attackers to execute arbitrary code via a crafted backup file.
• CVE-2021-41450, published 2021-12-08. High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days. An HTTP request smuggling attack in TP-Link AX10v1 before v1_211117 allows a remote unauthenticated attacker to DoS the web application via sending a specific HTTP packet.