CVE-2022-22922

Published: Feb 18, 2022Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

TP-Link TL-WA850RE Wi-Fi Range Extender before v6_200923 was discovered to use highly predictable and easily detectable session keys, allowing attackers to gain administrative privileges.

Affected (1)

Products: Tp Link: Tl Wa850re Firmware

Tp Link

1 product

Tl Wa850re Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Tl Wa850re Firmware	Before v6_200923

Running on/with	Platform Versions
Tp Link Tl Wa850re	Version 6

Related CWEs

CWE-330

Use of Insufficiently Random Values

The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.

References (4)

https://github.com/emremulazimoglu/cve/blob/main/CWE330-TL-WA850RE-v6.md

Source: cve@mitre.org

ExploitIssue TrackingThird Party Advisory

https://www.tp-link.com/us/support/download/tl-wa850re/v6/#Firmware

Source: cve@mitre.org

ProductVendor Advisory

https://github.com/emremulazimoglu/cve/blob/main/CWE330-TL-WA850RE-v6.md

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingThird Party Advisory

https://www.tp-link.com/us/support/download/tl-wa850re/v6/#Firmware

Source: af854a3a-2127-422b-91ae-364da2661108

ProductVendor Advisory

Timeline

No history available yet.