← Database

CVE-2022-48194

HIGH CVSS: 8.8 Published: 2022-12-30 Modified: 2026-06-17

Description

TP-Link TL-WR902AC devices through V3 0.9.1 allow remote authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS) by uploading a crafted firmware update because the signature check is inadequate.

Affected Platforms

Tp-Link Tl-Wr902Ac FirmwareTp-Link Tl-Wr902Ac

Weakness Type

CWE-434, CWE-434

References