Sign-up

ID

VAR-202212-2145


CVE

CVE-2022-46912


TITLE

TP-Link TL-WR841N  and  TL-WA841ND V7  Vulnerability in

Trust: 0.8

sources: JVNDB: JVNDB-2022-003442

DESCRIPTION

An issue in the firmware update process of TP-Link TL-WR841N / TL-WA841ND V7 3.13.9 and earlier allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image. TP-Link TL-WR841N and TL-WA841ND V7 Exists in unspecified vulnerabilities.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state

Trust: 1.62

sources: NVD: CVE-2022-46912 // JVNDB: JVNDB-2022-003442

AFFECTED PRODUCTS

vendor:tp linkmodel:tl-wr841nscope:lteversion:3.13.9

Trust: 1.0

vendor:tp linkmodel:tl-wr841nd v7scope:lteversion:3.13.9

Trust: 1.0

vendor:tp linkmodel:tl-wr841nscope: - version: -

Trust: 0.8

vendor:tp linkmodel:tl-wr841nd v7scope: - version: -

Trust: 0.8

sources: JVNDB: JVNDB-2022-003442 // NVD: CVE-2022-46912

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2022-46912
value: HIGH

Trust: 1.0

134c704f-9b21-4f2e-91b3-4a467353bcc0: CVE-2022-46912
value: HIGH

Trust: 1.0

NVD: CVE-2022-46912
value: HIGH

Trust: 0.8

CNNVD: CNNVD-202212-3643
value: HIGH

Trust: 0.6

nvd@nist.gov: CVE-2022-46912
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 2.8
impactScore: 5.9
version: 3.1

Trust: 2.0

NVD: CVE-2022-46912
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: JVNDB: JVNDB-2022-003442 // CNNVD: CNNVD-202212-3643 // NVD: CVE-2022-46912 // NVD: CVE-2022-46912

PROBLEMTYPE DATA

problemtype:NVD-CWE-noinfo

Trust: 1.0

problemtype:Lack of information (CWE-noinfo) [NVD evaluation ]

Trust: 0.8

sources: JVNDB: JVNDB-2022-003442 // NVD: CVE-2022-46912

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202212-3643

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202212-3643

PATCH

title:Security Advisoryurl:https://www.tp-link.com/us/press/security-advisory/

Trust: 0.8

sources: JVNDB: JVNDB-2022-003442

EXTERNAL IDS

db:NVDid:CVE-2022-46912

Trust: 3.2

db:JVNDBid:JVNDB-2022-003442

Trust: 0.8

db:CNNVDid:CNNVD-202212-3643

Trust: 0.6

sources: JVNDB: JVNDB-2022-003442 // CNNVD: CNNVD-202212-3643 // NVD: CVE-2022-46912

REFERENCES

url:https://www.tp-link.com/us/press/security-advisory/

Trust: 2.4

url:https://hackmd.io/%40slasvrz_srw7nqcsunofea/sk6sfbtpi

Trust: 1.0

url:https://nvd.nist.gov/vuln/detail/cve-2022-46912

Trust: 0.8

url:https://hackmd.io/@slasvrz_srw7nqcsunofea/sk6sfbtpi

Trust: 0.6

url:https://cxsecurity.com/cveshow/cve-2022-46912/

Trust: 0.6

sources: JVNDB: JVNDB-2022-003442 // CNNVD: CNNVD-202212-3643 // NVD: CVE-2022-46912

SOURCES

db:JVNDBid:JVNDB-2022-003442
db:CNNVDid:CNNVD-202212-3643
db:NVDid:CVE-2022-46912

LAST UPDATE DATE

2025-04-18T04:03:27.007000+00:00


SOURCES UPDATE DATE

db:JVNDBid:JVNDB-2022-003442date:2023-02-17T06:05:00
db:CNNVDid:CNNVD-202212-3643date:2022-12-29T00:00:00
db:NVDid:CVE-2022-46912date:2025-04-16T18:16:02.433

SOURCES RELEASE DATE

db:JVNDBid:JVNDB-2022-003442date:2023-02-17T00:00:00
db:CNNVDid:CNNVD-202212-3643date:2022-12-20T00:00:00
db:NVDid:CVE-2022-46912date:2022-12-20T20:15:11.080