High

DATE	CVE	VULNERABILITY TITLE	RISK
2021-06-15	CVE-2021-28857	Insufficiently Protected Credentials vulnerability in Tp-Link Tl-Wpa4220 Firmware 4.0.2 TP-Link's TL-WPA4220 4.0.2 Build 20180308 Rel.37064 username and password are sent via the cookie. network low complexity tp-link CWE-522	7.5
2020-11-18	CVE-2020-24297	OS Command Injection vulnerability in Tp-Link Tl-Wpa4220 Firmware 4.0.2 httpd on TP-Link TL-WPA4220 devices (versions 2 through 4) allows remote authenticated users to execute arbitrary OS commands by sending crafted POST requests to the endpoint /admin/powerline. network low complexity tp-link CWE-78	8.8