CVE-2022-22922

TP-Link TL-WA850RE Wi-Fi Range Extender before v6_200923 was discovered to use highly predictable and easily detectable session keys, allowing attackers to…

published February 18, 2022

CVSS
—
EPSS
1%
Percentile
70.7
In the wild
Unconfirmed
What it is

⚡ A predictable session key is the key to the kingdom! With TP-Link TL-WA850RE Wi-Fi Range Extender before v6_200923, an attacker can easily gain administrative access. 🔐 Think of this like a restaurant using the same easy-to-guess PIN for every reservation. If someone knows the PIN, they can just walk in and change their order or even mess with the whole menu! If exploited, an attacker could stroll right into your network and take control of your range extender. This means they could change settings, snoop on traffic, or even launch attacks against other devices connected to your network. Absolutely devastating!

Put simply

Think of this like a restaurant using the same easy-to-guess PIN for every reservation. If someone knows the PIN, they can just walk in and change their order or even mess with the whole menu! This vulnerability arises because the device uses session keys that are highly predictable and can be easily detected, allowing unauthorized users to gain administrative privileges. Simply put, it's like leaving your front door unlocked with a sign saying, 'Come on in!'

What to do

If exploited, an attacker could stroll right into your network and take control of your range extender. This means they could change settings, snoop on traffic, or even launch attacks against other devices connected to your network. Absolutely devastating! To protect your network, upgrade the TP-Link TL-WA850RE to version v6_200923 or later immediately. Additionally, consider changing your default passwords and securing your Wi-Fi settings to enhance overall security. Better safe than sorry! You've got this! Take these steps, and you'll have your network fortified in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01324 · 70.7th percentile
Published
2022-02-18T00:55Z
EPSS history
Timeline
  • 18 FEB 00:55Z
    TP-Link TL-WA850RE Wi-Fi Range Extender before v6_200923 was discovered to use highly predictable and easily detectable session keys, allowing attackers to…
    cvelistv5