TP-Link TL-WR845N(UN)_V4_190219 was discovered to transmit credentials in base64 encoded form, which can be easily decoded by an attacker executing a man-in-the-middle attack.
CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HTp Link Tl Wr845n
HWTp-Linkv4Tp Link Tl Wr845n Firmware
OSTp-Link190219
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
Related vulnerabilities
CVE-2024-57040CRITICAL9.8PL ✓ten sam produkt
TP-Link TL-WR845N — zakodowane na stałe hasło roota (hardcoded password)
CVE-2024-46340CRITICAL9.8PL ✓ten sam produkt
TP-Link TL-WR845N — przesyłanie danych uwierzytelniających w postaci jawnego tekstu
CVE-2024-50699HIGH8.0ten sam produkt
TP-Link TL-WR845N(UN)_V4_201214, TL-WR845N(UN)_V4_200909 and TL-WR845N(UN)_V4_190219 were discovered to contai...
CVE-2025-15551MEDIUM5.9ten sam produkt
The response coming from TP-Link Archer MR200 v5.2, C20 v5 and v6, TL-WR850N v3, and TL-WR845N v4 for any requ...
CVE-2025-6542CRITICAL9.3PL ✓ten sam vendor
Zdalne wykonanie poleceń OS bez uwierzytelnienia w routerach TP-Link Omada