← Database

CVE-2025-14738

HIGH CVSS: 7.5 Published: 2025-12-18 Modified: 2026-06-17

Description

Improper authentication vulnerability in TP-Link WA850RE (httpd modules) allows unauthenticated attackers to download the configuration file.This issue affects: ≤ WA850RE V2_160527, ≤ WA850RE V3_160922.

Affected Platforms

Tp-Link Tl-Wa850ReTp-Link Tl-Wa850Re Firmware

Weakness Type

CWE-287, NVD-CWE-noinfo

References