medium5.5
CVE-2021-28858
TP-Link's TL-WPA4220 4.0.2 Build 20180308 Rel.37064 does not use SSL by default.
Impact
TP-Link's TL-WPA4220 4.0.2 Build 20180308 Rel.37064 does not use SSL by default. Attacker on the local network can monitor traffic and capture the cookie and other sensitive information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tp-Link | Tl-Wpa4220 Firmware | Version 4.0.2 |