CVE-2021-41450

HighCVSS 7.5

Published: 08/12/2021(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

1.76%

75th percentile - higher than 75% of all known CVEs

Summary

An HTTP request smuggling vulnerability in TP-Link AX10v1 before v1_211117 allows a remote unauthenticated attacker to perform a DoS attack on the web application by sending a specially crafted HTTP packet.

Risk Assessment

The risk involves potential disruption of the router's management interface, preventing device administration and possibly leading to network connectivity loss.

Recommendation

Immediately update the TP-Link AX10v1 router firmware to version v1_211117 or later, which includes a fix for this vulnerability.

Other vulnerabilities in TP-Link AX10v1

CVE-2021-41451High
A misconfiguration in HTTP/1.0 and HTTP/1.1 of the web interface in TP-Link AX10v1 before V1_211117 allows a remote unauthenticated attacker to send a specially crafted HTTP request and receive a misconfigured HTTP/0.9 response, potentially leading into a cache poisoning attack.

Original NVD description (English source)

An HTTP request smuggling attack in TP-Link AX10v1 before v1_211117 allows a remote unauthenticated attacker to DoS the web application via sending a specific HTTP packet.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS