Ax10 Firmware

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:tp-link:ax10_firmware:v1_211117:*:*:*:*:*:*:*

part: o version: v1_211117 update: *

VendorTp Link (0b2e1553-ac8b-5981-a60b-ca6c27ee3a6e)
ProductAx10 Firmware (6f33bcdf-b2b7-5b4a-9bae-75fbe075ca8b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-41541 vulnerable 2026-06-08 05:48:30.466013 Details available
TP-Link AX10v1 V1_211117 allows attackers to execute a replay attack by using a previously transmitted encrypted authentication message and valid authentication token. Attackers are able to login to the web application as an admin user.
Published: 2022-10-18T00:00:00.000Z
Updated: 2025-05-15T14:58:08.480Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41540 vulnerable 2026-06-08 05:48:30.464489 Details available
The web app client of TP-Link AX10v1 V1_211117 uses hard-coded cryptographic keys when communicating with the router. Attackers who are able to intercept the communications between the web client and router through a man-in-the-middle attack can then obtain the sequence key via a brute-force attack, and access sensitive information.
Published: 2022-10-18T00:00:00.000Z
Updated: 2025-05-15T14:59:23.252Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.