Vulnerabilities > TP Link > Ax10 Firmware

DATE CVE VULNERABILITY TITLE RISK
2022-10-18 CVE-2022-41540 Use of Hard-coded Credentials vulnerability in Tp-Link Ax10 Firmware V1211117
The web app client of TP-Link AX10v1 V1_211117 uses hard-coded cryptographic keys when communicating with the router.
network
high complexity
tp-link CWE-798
5.9
2022-10-18 CVE-2022-41541 Authentication Bypass by Capture-replay vulnerability in Tp-Link Ax10 Firmware V1211117
TP-Link AX10v1 V1_211117 allows attackers to execute a replay attack by using a previously transmitted encrypted authentication message and valid authentication token.
network
high complexity
tp-link CWE-294
8.1