High severity8.0NVD Advisory· Published Dec 10, 2024· Updated Jun 17, 2026

CVE-2024-50699

Description

TP-Link TL-WR845N(UN)_V4_201214, TL-WR845N(UN)_V4_200909 and TL-WR845N(UN)_V4_190219 were discovered to contain weak default credentials for the Administrator account.

Affected products

TP-Link/TL-WR845Ncpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: V4_201214, V4_200909, V4_190219

Patches

Vulnerability mechanics

References

security.iiita.ac.in/iot/password-reset-missing-tplink.pdfnvdExploitThird Party Advisory
security.iiita.ac.in/iot/base64-authorization.docxnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.520
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000