CVE-2022-4499

Katalog CVE

CVSS 7.5 · High EPSS 0,71%

Kerentanan Observable Discrepancy pada tp-link archer c5 firmware, tp-link tl-wr710n firmware. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

TP-Link routers, Archer C5 and WR710N-V1, using the latest software, the strcmp function used for checking credentials in httpd, is susceptible to a side-channel attack. By measuring the response time of the httpd process, an attacker could guess each byte of the username and password.

Rincian

Terbit di NVD

11 Januari 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-203: Observable Discrepancy

EPSS (30 hari)

0,71% peluang dieksploitasi; lebih tinggi dari 52,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://kb.cert.org/vuls/id/572615 advisory pihak ketiga · vdb entry
• https://www.kb.cert.org/vuls/id/572615