Approved changes feed: RSS · Atom
cpe:2.3:h:tp-link:ax10:1.0:*:*:*:*:*:*:*
part: h version: 1.0 update: *
| Vendor | Tp Link (0b2e1553-ac8b-5981-a60b-ca6c27ee3a6e) |
|---|---|
| Product | Ax10 (5bb1da26-6ff9-5f4a-86d5-feb910f62577) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-41541 |
not_vulnerable | 2026-06-08 05:48:30.466039 |
Details available
TP-Link AX10v1 V1_211117 allows attackers to execute a replay attack by using a previously transmitted encrypted authentication message and valid authentication token. Attackers are able to login to the web application as an admin user.
Published: 2022-10-18T00:00:00.000Z
Updated: 2025-05-15T14:58:08.480Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41540 |
not_vulnerable | 2026-06-08 05:48:30.465522 |
Details available
The web app client of TP-Link AX10v1 V1_211117 uses hard-coded cryptographic keys when communicating with the router. Attackers who are able to intercept the communications between the web client and router through a man-in-the-middle attack can then obtain the sequence key via a brute-force attack, and access sensitive information.
Published: 2022-10-18T00:00:00.000Z
Updated: 2025-05-15T14:59:23.252Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.