---
id: 7336
title: "TP-Link TL-WR940N: 1-days analysis after story. (CVE-2022-43636 & CVE-2022-43635)"
source_domain: blog.viettelcybersecurity.com
source_url: "https://blog.viettelcybersecurity.com/tp-link-tl-wr940n-1-days-analysis-after-story-cve-2022-4363-cve-2022-43635/"
published_at: "2022-12-26T02:53:40Z"
tags: ["authentication-bypass", "router", "firmware-analysis", "tp-link", "cve-2022-43636", "cve-2022-43635"]
phying_url: "https://phying.com/item/7336"
lang: en
---

# TP-Link TL-WR940N: 1-days analysis after story. (CVE-2022-43636 & CVE-2022-43635)

## Summary

Analysis of TP-Link TL-WR940N (CVE-2022-43636/43635): AuthPass() in the RSA/AES-protected login flow always returns success, letting attackers reuse stale session IDs to bypass authentication.

## Intelligence Metadata

- **Sources:** blog.viettelcybersecurity.com
- **Published:** 2022-12-26T02:53:40Z
- **Original:** https://blog.viettelcybersecurity.com/tp-link-tl-wr940n-1-days-analysis-after-story-cve-2022-4363-cve-2022-43635/
- **Phying News:** https://phying.com/item/7336