TP-Links TL-WPA4220 4.0.2 Build 20180308 Rel.37064 does not use SSL by default. Attacker on the local network can monitor traffic and capture the cookie and other sensitive information.
Weakness
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Tl-wpa4220_firmware | Tp-link | 4.0.2-build_20180308_rel.37064 (including) | 4.0.2-build_20180308_rel.37064 (including) |