CVE-2022-29402

TP-Link TL-WR840N EU v6.20 was discovered to contain insecure protections for its UART console

Medium · published May 25, 2022

CVSS v3.1
6.8
EPSS
0%
Percentile
36.1
In the wild
Unconfirmed
What it is

TP-Link TL-WR840N EU v6.20 was discovered to contain insecure protections for its UART console. This vulnerability allows attackers to connect to the UART port via a serial connection and execute commands as the root user without authentication.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AC:L/AV:P/A:H/C:H/I:H/PR:N/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.00429 · 36.1th percentile
Published
2022-05-25T17:24Z
EPSS history
Timeline
  • 25 MAY 17:24Z
    TP-Link TL-WR840N EU v6.20 was discovered to contain insecure protections for its UART console
    cvelistv5