CVE-2022-46428

4.8 mediumEPSS 0.4%

Medium (4.8) in tp-link tl-wr1043nd v1 firmware. EPSS 0.4% chance of exploitation in the next 30 days.

TP-Link TL-WR1043ND V1 3.13.15 and earlier allows authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image during the firmware update process.

Severity

CVSS 3.1

4.8 medium

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 31% of CVEs (scores of 2026-10-31)
CWE: CWE-494
Published: 2022-12-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

tp-link:tl-wr1043nd_v1_firmware

References

https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1hP34Hvj
https://www.tp-link.com/us/press/security-advisory/
https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1hP34Hvj
https://www.tp-link.com/us/press/security-advisory/

Check your stack JSON