Detections
Analytics
CVE-2021-41451
high
Description
A misconfiguration in HTTP/1.0 and HTTP/1.1 of the web interface in TP-Link AX10v1 before V1_211117 allows a remote unauthenticated attacker to send a specially crafted HTTP request and receive a misconfigured HTTP/0.9 response, potentially leading into a cache poisoning attack.
References
https://www.tp-link.com/us/support/download/archer-ax10/v1/#Firmware