Tp Link Wr710N vulnerabilities

2 vulnerabilities

Known vulnerabilities in Tp Link Wr710N, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2022-4498tp-linkarcher_c5_firmware+2
EPSS score
1.78%
In TP-Link routers, Archer C5 and WR710N-V1, running the latest available code, when receiving HTTP Basic Authentication the httpd service can be sent a crafted packet that causes a heap overflow. This can result in either a DoS (by crashing the httpd process) or an arbitrary code execution.7.5CVE-2022-4499tp-linkarcher_c5_firmware+2
EPSS score
0.71%
TP-Link routers, Archer C5 and WR710N-V1, using the latest software, the strcmp function used for checking credentials in httpd, is susceptible to a side-channel attack. By measuring the response time of the httpd process, an attacker could guess each byte of the username and password.