TP-Link Tl-WPA4220 Firmware vulnerabilities

4 CVEs affecting TP-Link Tl-WPA4220 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-28858, published 2021-06-15.

More from TP-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-24297, published 2020-11-18. High severity, CVSS 8.8. EPSS: 3.7% chance of exploitation in the next 30 days. httpd on TP-Link TL-WPA4220 devices (versions 2 through 4) allows remote authenticated users to execute arbitrary OS commands by sending crafted POST requests to the endpoint /admin/powerline. Fixed…
• CVE-2020-28005, published 2020-11-18. Medium severity, CVSS 6.5. EPSS: 1.8% chance of exploitation in the next 30 days. httpd on TP-Link TL-WPA4220 devices (hardware versions 2 through 4) allows remote authenticated users to trigger a buffer overflow (causing a denial of service) by sending a POST request to the…
• CVE-2021-28857, published 2021-06-15. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. TP-Link's TL-WPA4220 4.0.2 Build 20180308 Rel.37064 username and password are sent via the cookie.
• CVE-2021-28858, published 2021-06-15. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. TP-Link's TL-WPA4220 4.0.2 Build 20180308 Rel.37064 does not use SSL by default. Attacker on the local network can monitor traffic and capture the cookie and other sensitive information.