CVE-2022-4499 - CVE House
Back to Database
Status published Unknown CVE-2022-4499

The strcmp function in TP-Link routers, Archer C5 and WR710N-V1, used for checking credentials in httpd, is susceptible to a side-channel attack.

Vulnerability Description

TP-Link routers, Archer C5 and WR710N-V1, using the latest software, the strcmp function used for checking credentials in httpd, is susceptible to a side-channel attack. By measuring the response time of the httpd process, an attacker could guess each byte of the username and password.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-4499

Credits & Attribution

No credits recorded in the NVD database.

References

More from TP-Link

View All →
CVE-2025-40634
Stack-based buffer overflow in TP-Link Archer AX50
Critical 9.2
CVE-2025-3442
Information Disclosure Vulnerability in TP-Link Tapo IoT Smart Hub
Medium 4.4
CVE-2025-1099
Information Disclosure Vulnerability in TP-Link Tapo C500 Wi-Fi Camera
High 7
CVE-2025-0730
TP-Link TL-SG108E HTTP GET Request usr_account_set.cgi get request method with sensitive query strings
Medium 6.3
CVE-2025-0729
TP-Link TL-SG108E clickjacking
Medium 6.9

Affected Vendor

Affected Software

WR710N, Archer C5
Vulnerable Versions:
V1-151022, V2_160221_US

Timeline

Official Publish: January 11th, 2023
Last Modified: November 4th, 2025
Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.