CVE-2025-14738CWE-287

Configuration Disclosure Vulnerability in TP-Link WA850RE

Medium · published December 18, 2025

CVSS v4.0
5.7
EPSS
0%
Percentile
33.9
In the wild
Unconfirmed
What it is

⚠️ A simple HTTP request is all it takes for an attacker to grab your TP-Link's configuration file! This is the kind of vulnerability that keeps security heroes on their toes! 🦸 Think of it like a hotel that left its guest list wide open, allowing anyone to peek at who’s staying there and what rooms they’re in. This vulnerability lets unauthorized users download sensitive settings without even breaking a sweat! With this flaw, an attacker could easily gain access to your router's configuration, potentially putting your entire home network at risk. They could view or alter settings like Wi-Fi passwords, making it a much easier target for further attacks. Ignoring this could lead to unauthorized access or security breaches!

Put simply

Think of it like a hotel that left its guest list wide open, allowing anyone to peek at who’s staying there and what rooms they’re in. This vulnerability lets unauthorized users download sensitive settings without even breaking a sweat! This improper authentication vulnerability in the TP-Link WA850RE allows unauthenticated attackers to download sensitive configuration files from the HTTP server, exposing critical settings for exploitation.

What to do

With this flaw, an attacker could easily gain access to your router's configuration, potentially putting your entire home network at risk. They could view or alter settings like Wi-Fi passwords, making it a much easier target for further attacks. Ignoring this could lead to unauthorized access or security breaches! Update your TP-Link WA850RE to the latest firmware version to close this hole. If you're still using WA850RE versions V2_160527 or V3_160922, consider implementing additional network security measures to limit unauthorized access until a patch is applied. 🛡️ You've got this! By taking these steps, you'll help secure your network and keep those cyber villains at bay! 🔒✨

The record
Technical detail
CVSS v4.0
5.7 · MEDIUM
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
EPSS
0.00407 · 33.9th percentile
Weakness
CWE-287 · Improper Authentication
Published
2025-12-18T18:01Z
EPSS history
Timeline
  • 18 DEC 18:01Z
    Configuration Disclosure Vulnerability in TP-Link WA850RE
    cvelistv5