Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
This vulnerability allows network-adjacent attackers to escalate privileges on affected installations of TP-Link TL-WA855RE Firmware Ver: 855rev4-up-ver1-0-1-P1[20191213-rel60361] Wi-Fi extenders. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the first-time setup process. The issue results from the lack of proper validation on first-time setup requests. An attacker can leverage this vulnerability to reset the password for the Admin account and execute code in the context of the device. Was ZDI-CAN-10003.
CVSS Information
N/A
Vulnerability Type
认证机制不恰当
Vulnerability Title
TP-Link TL-WA855RE 授权问题漏洞
Vulnerability Description
TP-Link TL-WA855RE是中国普联（TP-Link）公司的一款无线网络信号扩展器。 使用855rev4-up-ver1-0-1-P1[20191213-rel60361]版本固件的TP-Link TL-WA855RE中的初次设置进程存在授权问题漏洞，该漏洞源于程序没有正确验证初次设置的请求。攻击者可利用该漏洞重置Admin账户密码，执行代码。
CVSS Information
N/A
Vulnerability Type
N/A