high7.5
CVE-2025-14738
Improper authentication vulnerability in TP-Link WA850RE (httpd modules) allows unauthenticated attackers to download the configuration file.This issue affects…
Impact
Improper authentication vulnerability in TP-Link WA850RE (httpd modules) allows unauthenticated attackers to download the configuration file.This issue affects: ≤ WA850RE V2_160527, ≤ WA850RE V3_160922.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tp-Link | Tl-Wa850re Firmware | through 160527 through 160922 |
Weakness classification
References
- NVD record
- CVE.org record
- https://blog.exodusintel.com/2022/06/23/tp-link-wa850re-unauthenticated-configuration-disclosure-vulnerability/
- https://www.tp-link.com/us/support/download/tl-wa850re/v2/#Firmware
- https://www.tp-link.com/us/support/download/tl-wa850re/v3/#Firmware
- https://www.tp-link.com/us/support/faq/4848/