TP-Link TL-WR940N: 1-days analysis after story. (CVE-2022-43636 & CVE-2022-43635)

After finished my 1-days analysis, I’ve looked into other function of the web service binary and found a funny bug in the authenticate process. I/ Login Process Before we talk about the bug, let’s have a look at the communication between client and device. Login sequenceAs you can