TP-Link Tl-WA801N Firmware vulnerabilities

2 CVEs affecting TP-Link Tl-WA801N Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-46914, published 2022-12-20.

More from TP-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-3275, published 2021-03-26. Medium severity, CVSS 6.1. EPSS: 1.8% chance of exploitation in the next 30 days. Unauthenticated stored cross-site scripting (XSS) exists in multiple TP-Link products including WIFI Routers (Wireless AC routers), Access Points, ADSL + DSL Gateways and Routers, which affects…
• CVE-2022-46914, published 2022-12-20. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. An issue in the firmware update process of TP-LINK TL-WA801N / TL-WA801ND V1 v3.12.16 and earlier allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted…