TP-Links TL-WPA4220 4.0.2 Build 20180308 Rel.37064 does not use SSL by default. Attacker on the local network can monitor traffic and capture the cookie and other sensitive information.
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Tl-wpa4220_firmware | Tp-link | 4.0.2-build_20180308_rel.37064 (including) | 4.0.2-build_20180308_rel.37064 (including) |