CVE-2021-40288 Information

Description

A denial-of-service attack in WPA2 and WPA3-SAE authentication methods in TP-Link AX10v1 before V1_211014 allows a remote unauthenticated attacker to disconnect an already connected wireless client via sending with a wireless adapter specific spoofed authentication frames

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Reference

https://www.tp-link.com/us/support/download/archer-ax10/v1/#Firmware

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

NONE

Availability Impact

NONE

Base Score

HIGH

Base Severity

7.5