← Vulnerability feed

Vulnerability record · CVE-2024-46340 · published 10 December 2024

CVE-2024-46340: Tp-link tl-wr845n firmware cleartext storage of sensitive data vulnerability

Tp Link · Tl Wr845n Firmware

TL-WR845N(UN)_V4_201214, TP-Link TL-WR845N(UN)_V4_200909, and TL-WR845N(UN)_V4_190219 was discovered to transmit user credentials in plaintext after executing a factory reset.

9.8 CVSS 3.1 Critical EPSS 0.34% · top 75.2% CWE-312 · Cleartext storage of sensitive data
9.8CVSS 3.1 base score
0.34%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

TL-WR845N(UN)_V4_201214, TP-Link TL-WR845N(UN)_V4_200909, and TL-WR845N(UN)_V4_190219 was discovered to transmit user credentials in plaintext after executing a factory reset.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://security.iiita.ac.in/iot/factory-reset.docx Third Party Advisory
https://security.iiita.ac.in/iot/factory-reset.docx Third Party Advisory

Track CVE-2024-46340 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2024-57040Tp-link tl-wr845n firmware hard-coded credentials vulnerabilityTP-Link TL-WR845N devices with firmware TL-WR845N(UN)_V4_200909 and TL-WR845N(UN)_V4_190219 was discovered to contain a hardcoded password for the ro…EPSS 1.2%8.0CVE-2024-46341Tp-link tl-wr845n firmware insufficiently protected credentials vulnerabilityTP-Link TL-WR845N(UN)_V4_190219 was discovered to transmit credentials in base64 encoded form, which can be easily decoded by an attacker executing a…EPSS 0.24%8.0CVE-2024-50699Tp-link tl-wr845n firmware insufficiently protected credentials vulnerabilityTP-Link TL-WR845N(UN)_V4_201214, TL-WR845N(UN)_V4_200909 and TL-WR845N(UN)_V4_190219 were discovered to contain weak default credentials for the Admi…EPSS 0.42%5.9CVE-2025-15551Tp-link archer mr200 firmware vulnerabilityThe response coming from TP-Link Archer MR200 v5.2, C20 v5 and v6, TL-WR850N v3, and TL-WR845N v4 for any request is getting executed by the JavaScri…EPSS 0.42%5.7CVE-2011-4723D-Link DIR-300 router stores passwords in cleartextThe D-Link DIR-300 router stores passwords in cleartext rather than in a protected form. Anyone who can reach the stored data can read credentials di…KEVEPSS 3.1%analysed

Source: NIST National Vulnerability Database (record CVE-2024-46340), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.