CVE-2022-22922

Critical

Description

TP-Link TL-WA850RE Wi-Fi Range Extender before v6_200923 was discovered to use highly predictable and easily detectable session keys, allowing attackers to gain administrative privileges.

SeverityCritical
CVSS9.8
Exploit probability—
ProductTp-link Tl-wa850re Firmware
PublishedFeb 18, 2022
First seenFeb 18, 2022

How to fix

Update
  • tp-link tl-wa850re_firmwarev6_200923 or later

Affected products

ProductAffected versionsFixed in
tp-link tl-wa850re_firmwarev < v6_200923v6_200923

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2022-22922 · Tp-link Tl-wa850re Firmware · Dark Radar