CVE-2022-41541

State: Published
Severity: 8.1 High
Published: Oct 18, 2022
Updated: May 15, 2025
Reserved: Sep 26, 2022

Description

TP-Link AX10v1 V1_211117 allows attackers to execute a replay attack by using a previously transmitted encrypted authentication message and valid authentication token. Attackers are able to login to the web application as an admin user.

Scores

CVSS	Score	Vector	Source
3.1	8.1 High	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-294 Authentication Bypass by Capture-replay

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://www.tp-link.com/us/support/download/archer-ax10/v1/#Firmware
https://github.com/efchatz/easy-exploits/tree/main/Web/TP-Link/Replay

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.