Threats tagged 'ghsa-f7mq-68q8-xqv6'

TP-Link TL-WR841N version 13 uses DES-CBC encryption in its TDDPv2 debug protocol with a cryptographic key derived from default web management credentials. This key derivation makes the encryption key predictable if the device remains in its default configuration. A network-adjacent attacker can exploit this vulnerability to access the debug protocol without authorization, read debug data, modify some device configuration settings, and cause the device to reboot, leading to integrity loss and denial-of-service.