High · published August 31, 2020
CVSS calls it high at 8.8. It is confirmed in active exploitation. It sits in the 97.7th percentile for exploit probability.
🚨 A simple POST request can wipe your TP-Link TL-WA855RE device clean! An attacker on the same network can reset it and take control, all without breaking a sweat. ⚡ Think of it like a guest at a dinner party who finds the reset button on your fancy smart oven. With a quick press, they could set it back to factory settings, and suddenly their cooking skills are the only ones in the kitchen! This means an attacker could reset your device, reboot it, and gain unauthorized access by setting a new admin password. If they’re feeling particularly mischievous, they could take full control of your network devices, leading to data theft or even worse!
Think of it like a guest at a dinner party who finds the reset button on your fancy smart oven. With a quick press, they could set it back to factory settings, and suddenly their cooking skills are the only ones in the kitchen! This vulnerability allows an unauthenticated user on the same network to send a TDDP_RESET POST request, triggering a factory reset and enabling them to alter admin credentials.
This means an attacker could reset your device, reboot it, and gain unauthorized access by setting a new admin password. If they’re feeling particularly mischievous, they could take full control of your network devices, leading to data theft or even worse! To protect yourself, immediately update the firmware of your TL-WA855RE to the latest version. Consider changing your network configuration to limit access to trusted devices only. 🛡️ You've got this! By following these steps, you can regain control and keep your network safe. Let's patch it up! 🎉