CVE-2022-46430
low-risk
Published 2022-12-20
TP-Link TL-WR740N V1 and V2 v3.12.4 and earlier allows authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image during the firmware update process.
Do I need to act?
-
0.18% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
4
CVSS 4.8/10
Medium
NETWORK
/ HIGH complexity
Affected Products (4)
Tl-Wr740N V1 Firmware
Tl-Wr740N V2 Firmware
Tl-Wr741Nd V1 Firmware
Tl-Wr741Nd V2 Firmware
Affected Vendors
26
/ 100
low-risk
Severity
15/34 · Moderate
Exploitability
1/34 · Minimal
Exposure
10/34 · Low