Vulnerability Details : CVE-2012-2440
The default configuration of the TP-Link 8840T router enables web-based administration on the WAN interface, which allows remote attackers to establish an HTTP connection and possibly have unspecified other impact via unknown vectors.
Exploit prediction scoring system (EPSS) score for CVE-2012-2440
Probability of exploitation activity in the next 30 days: 0.55%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 74 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2012-2440
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
CWE ids for CVE-2012-2440
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2012-2440
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/74624
TP-Link 8840T DSL Router web interface security bypass CVE-2012-2440 Vulnerability Report
-
http://www.kb.cert.org/vuls/id/834723
VU#834723 - TP-Link 8840T DSL router default remote management vulnerabilityUS Government Resource
Products affected by CVE-2012-2440
- cpe:2.3:a:tp-link:8840t:-:*:*:*:*:*:*:*