« Volver al listado

CVE-2022-32058

Estado: ModificadaAlta (7.5)—

Un bucle infinito en la función httpRpmPass de TP-Link TL-WR741N/TL-WR742N versión V1/V2/V3_130415, permite a atacantes causar una denegación de servicio (DoS) por medio de un paquete diseñado

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Tp-link — Tl-wr741n FirmwareTp-link — Tl-wr742n Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-32058",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-07-07T19:15:08.310",
  "references": [
    {
      "url": "https://github.com/whiter6666/CVE/blob/main/TP-Link%20TL-WR741NTL-WR742N%20.md",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://github.com/whiter6666/CVE/blob/main/TP-Link%20TL-WR741NTL-WR742N%20.md",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-835"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "An infinite loop in the function httpRpmPass of TP-Link TL-WR741N/TL-WR742N V1/V2/V3_130415 allows attackers to cause a Denial of Service (DoS) via a crafted packet."
    },
    {
      "lang": "es",
      "value": "Un bucle infinito en la función httpRpmPass de TP-Link TL-WR741N/TL-WR742N versión V1/V2/V3_130415, permite a atacantes causar una denegación de servicio (DoS) por medio de un paquete diseñado"
    }
  ],
  "lastModified": "2026-06-17T04:46:40.507",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:tp-link:tl-wr741n_firmware:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4AE31619-FF1D-461F-A07B-7C4128B55DC9"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:tp-link:tl-wr741n:v1:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "589C2746-2930-4D0C-9621-A436EB6C3A3B"
            },
            {
              "criteria": "cpe:2.3:h:tp-link:tl-wr741n:v2:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "817423F7-B216-4385-BB82-B8A5FB34F5D0"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:tp-link:tl-wr742n_firmware:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "21E26BC8-1C7F-46DA-9C19-7C958F50B489"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:tp-link:tl-wr742n:v1:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "FF1FD263-3E1A-4823-81C2-7B526DCFD0C7"
            },
            {
              "criteria": "cpe:2.3:h:tp-link:tl-wr742n:v2:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "6398A7B9-F980-4EE4-ACE2-E71B80B98CAD"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:tp-link:tl-wr741n_firmware:v3_130415:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "989060F5-33C0-4FA5-B07B-04547380A4B0"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:tp-link:tl-wr741n:v3:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2C3D8A87-8C94-4EAA-B1DB-9EA67A9EFC9C"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:tp-link:tl-wr742n_firmware:v3_130415:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AD2CCAAC-1C5A-45BE-A441-8BF6873C93BC"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:tp-link:tl-wr742n:v3:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "21A8ECAA-7146-4CA3-B20C-619098A53281"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}