CVE-2021-41451 | BDVDB-2026-166143 Detail

Description#

A misconfiguration in HTTP/1.0 and HTTP/1.1 of the web interface in TP-Link AX10v1 before V1_211117 allows a remote unauthenticated attacker to send a specially crafted HTTP request and receive a misconfigured HTTP/0.9 response, potentially leading into a cache poisoning attack.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.tp-link.com/us/support/download/archer-ax10/v1/#Firmware

Exploit#

No public exploit known

History#

Version 12021-12-17Record published in the CVE List.
Version 22026-07-09Most recent update recorded in the CVE List.