Vulnerability Details : CVE-2021-44032
TP-Link Omada SDN Software Controller before 5.0.15 does not check if the authentication method specified in a connection request is allowed. An attacker can bypass the captive portal authentication process by using the downgraded "no authentication" method, and access the protected network. For example, the attacker can simply set window.authType=0 in client-side JavaScript.
Products affected by CVE-2021-44032
- cpe:2.3:a:tp-link:omada_software_controller:*:*:*:*:*:windows:*:*
Exploit prediction scoring system (EPSS) score for CVE-2021-44032
0.16%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 53 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2021-44032
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:N/I:P/A:N |
10.0
|
2.9
|
NIST | |
|
7.5
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
3.9
|
3.6
|
NIST |
References for CVE-2021-44032
-
https://github.com/Orange-Cyberdefense/CVE-repository/blob/master/PoCs/POC_CVE-2021-44032_Kevin.md
CVE-repository/POC_CVE-2021-44032_Kevin.md at master · Orange-Cyberdefense/CVE-repository · GitHubExploit;Third Party Advisory
-
https://www.tp-link.com/us/security
TP-Link - Security Advisory | TP-LinkVendor Advisory
-
https://www.tp-link.com/us/omada-sdn/
Omada Cloud Software Defined Networking (SDN) | Cloud Centralized Management | TP-LinkVendor Advisory
Jump to