SB2022112409 - Multiple vulnerabilities in TP-Link TL-WR940N

Description

This security bulletin contains information about 2 secuirty vulnerabilities.

1) Use of insufficiently random values (CVE-ID: CVE-2022-43636)

The vulnerability allows a remote attacker to bypass authentication process.

The vulnerability exists due to the lack of sufficient randomness in the sequnce numbers used for session managment within the httpd service. A remote attacker on the local network can bypass authentication process and gain unauthorized access to the application.

2) Incorrect Implementation of Authentication Algorithm (CVE-ID: CVE-2022-43635)

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to the incorrect implementation of the authentication algorithm within the httpd service. A remote attacker on the local network can gain unauthorized access to sensitive information on the system.

Remediation

Install update from vendor's website.

References

• https://www.zerodayinitiative.com/advisories/ZDI-22-1614/
• https://www.zerodayinitiative.com/advisories/ZDI-22-1615/