CVE-2022-4296

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A vulnerability classified as problematic has been found in TP-Link TL-WR740N. Affected is an unknown function of the component ARP Handler. The manipulation leads to resource consumption. The attack needs to be done within the local network. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-214812.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-404

Affected software

Vendor	Product	Versions
TP-Link	TL-WR740N	n/a

References

https://vuldb.com/?id.214812Third Party Advisory
https://www.youtube.com/watch?v=D--fb-cesmAExploit, Permissions Required, Third Party Advisory
https://vuldb.com/?id.214812Third Party Advisory
https://www.youtube.com/watch?v=D--fb-cesmAExploit, Permissions Required, Third Party Advisory

Timeline

Published: Dec 6, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-429605.4EqualWeb Accessibility Widget 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.1.10, 3.0.0, 3.0.1, 3.0.2, 4.0.0, and 4.0.1 allows DOM XSS due to imprope CVE-2022-429615.3An issue was discovered in wolfSSL before 5.5.0. A fault injection attack on RAM via Rowhammer leads to ECDSA key disclosure. Users performi CVE-2022-429647.5An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the pymatgen PyPI package, when an attacker is able to suppl CVE-2022-429657.5An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the snowflake-connector-python PyPI package, when an attacke CVE-2022-429667.5An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the cleo PyPI package, when an attacker is able to supply ar CVE-2022-429679.6Caret is vulnerable to an XSS attack when the user opens a crafted Markdown file when preview mode is enabled. This directly leads to client CVE-2022-429689.8Gitea before 1.17.3 does not sanitize and escape refs in the git backend. Arguments to git commands are mishandled.CVE-2022-429697.5The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subv CVE-2022-42979.8The WP AutoComplete Search WordPress plugin through 1.0.4 does not sanitise and escape a parameter before using it in a SQL statement via an CVE-2022-429709.8A CWE-306: Missing Authentication for Critical Function The software does not perform any authentication for functionality that requires a p CVE-2022-429719.8A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could cause remote code execution when the attacker upl CVE-2022-429727.8A CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could cause local privilege escalation when a loc