Vulnerability Details CVE-2021-28858
TP-Link's TL-WPA4220 4.0.2 Build 20180308 Rel.37064 does not use SSL by default. Attacker on the local network can monitor traffic and capture the cookie and other sensitive information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 5.0%
CVSS Severity
CVSS v3 Score 5.5
CVSS v2 Score 2.1
References
Products affected by CVE-2021-28858
-
cpe:2.3:h:tp-link:tl-wpa4220:4.0
-
cpe:2.3:o:tp-link:tl-wpa4220_firmware:4.0.2