Tp-link Tl-wpa4220 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Tp-link Tl-wpa4220 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2020-24297 — CVSS 8.8 (high): httpd on TP-Link TL-WPA4220 devices (versions 2 through 4) allows remote authenticated users to execute arbitrary OS commands by sending…
• CVE-2021-28857 — CVSS 7.5 (high): TP-Link's TL-WPA4220 4.0.2 Build 20180308 Rel.37064 username and password are sent via the cookie.
• CVE-2020-28005 — CVSS 6.5 (medium): httpd on TP-Link TL-WPA4220 devices (hardware versions 2 through 4) allows remote authenticated users to trigger a buffer overflow (causing…
• CVE-2021-28858 — CVSS 5.5 (medium): TP-Link's TL-WPA4220 4.0.2 Build 20180308 Rel.37064 does not use SSL by default. Attacker on the local network can monitor traffic and…