CVE-2024-46340

Summary

CVE-2024-46340 is a new vulnerability affecting TP-Link TL-WR845N(UN) routers with firmware versions V4_200909 and V4_190219. The flaw exposes user credentials in plaintext during the factory reset process, posing a significant security risk. An attacker in proximity to the router during the factory reset procedure could intercept and gain access to the user's account information. Users are advised to avoid performing factory resets on these devices unless in a secure, private network or upgrade to the latest firmware version to mitigate this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.