Lucene search
+L

49 matches found

CNNVD
CNNVD
added 2022/02/14 12:0 a.m.7 views

Tp-link AC1750 输入验证错误漏洞

The Tp-link AC1750 is a wireless router from China P&L Tp-link. The TP-Link AC1750 suffers from an input validation error vulnerability that stems from a specific flaw in the NetUSB.ko module. The issue is caused due to a lack of proper validation of user-supplied data, which could result in an...

8.8CVSS6.3AI score0.01788EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
added 2022/02/10 12:0 a.m.35 views

(Pwn2Own) TP-Link AC1750 NetUSB Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetUSB.ko module. The issue results from the lack of proper...

8.8CVSS4.7AI score0.00739EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2022/02/10 12:0 a.m.44 views

TP-Link AC1750 NetUSB Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetUSB.ko module. The issue results from the lack of proper...

8.8CVSS6.1AI score0.01788EPSS
SaveExploits0
CNNVD
CNNVD
added 2022/02/10 12:0 a.m.10 views

TP-LINK AC1750 缓冲区错误漏洞

The TP-LINK AC1750 is a wireless router from China P&L TP-LINK. A buffer error vulnerability exists in the TP-LINK AC1750 prior to version 211210, which stems from a lack of proper validation of user-supplied data, which could result in reading beyond the end of an allocated buffer. An attacker...

8.8CVSS8.3AI score0.00739EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2021/12/01 12:0 a.m.7 views

PT-2021-6113 · Tp Link · Tp-Link Ac1750

Name of the Vulnerable Software and Affected Versions: TP-Link AC1750 versions prior to 211210 Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the...

8.8CVSS8.7AI score0.00739EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2021/11/08 12:0 a.m.12 views

PT-2021-6114 · Tp Link · Tp-Link Ac1750

Name of the Vulnerable Software and Affected Versions: TP-Link AC1750 version 1.1.4 Build 20211022 rel.591035553 Description: The issue is related to a read past the end of an allocated buffer in the NetUSB.ko module, which can be exploited by network-adjacent attackers to execute arbitrary code ...

8.8CVSS8.8AI score0.00739EPSS
SaveExploits0References8
OSV
OSV
added 2021/04/14 4:15 p.m.6 views

CVE-2021-27246

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 AC1750 1.0.15 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of MAC addresses by the tdpServer endpoin...

8CVSS7.6AI score0.06598EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/04/14 4:15 p.m.3 views

CVE-2021-27246

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 AC1750 1.0.15 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of MAC addresses by the tdpServer endpoin...

8CVSS8.2AI score0.06598EPSS
SaveExploits0References2
Prion
Prion
added 2021/04/14 4:15 p.m.25 views

Design/Logic Flaw

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 AC1750 1.0.15 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of MAC addresses by the tdpServer endpoin...

7.9CVSS8.1AI score0.06598EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/04/14 3:45 p.m.24 views

CVE-2021-27246

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 AC1750 1.0.15 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of MAC addresses by the tdpServer endpoin...

8CVSS8.2AI score0.06598EPSS
SaveExploits0References1
CVE
CVE
added 2021/04/14 3:45 p.m.73 views

CVE-2021-27246

CVE-2021-27246 affects TP-Link Archer A7 AC1750 (firmware 1.0.15). The flaw lies in the tdpServer MAC address handling: a crafted TCP message can write stack pointers to the stack, enabling network-adjacent attackers to execute code with root privileges. No authentication is required. This vulner...

8CVSS8.1AI score0.06598EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2021/03/29 9:15 p.m.21 views

Authentication flaw

This vulnerability allows a firewall bypass on affected installations of TP-Link Archer A7 prior to Archer C7USV5210125 and Archer A7USV5200220 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of IPv6 connections. The issue...

9.3CVSS8AI score0.03215EPSS
SaveExploits0References1Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2021/02/24 12:0 a.m.43 views

TP-Link AC1750 sync-server Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of MAC addresses by the tdpServer endpoint. A...

8CVSS5.2AI score0.06598EPSS
SaveExploits0
CNVD
CNVD
added 2021/01/05 12:0 a.m.4 views

Denial of Service Vulnerability in Netgear AC1750 R6400v2

The Netgear AC1750 R6400v2 is a Wi-Fi router. A denial of service vulnerability exists in the Netgear AC1750 R6400v2. An attacker can exploit the vulnerability to cause a denial of service on the target router and its upper tier operator's router by sending a carefully constructed packet to a...

7AI score
SaveExploits0
CNVD
CNVD
added 2020/11/16 12:0 a.m.43 views

TP-Link Archer A7 AC1750 Command Injection Vulnerability

TP-Link Archer A7 AC1750 is a wireless router from TP-Link. tdpServer security vulnerability exists in TP-Link Archer A7 AC1750 devices before version 201029, which can be exploited by attackers to execute arbitrary code from mac parameters...

10CVSS5.3AI score0.76621EPSS
SaveExploits2References1
OSV
OSV
added 2020/11/08 8:15 p.m.2 views

CVE-2020-28347

tdpServer on TP-Link Archer A7 AC1750 devices before 201029 allows remote attackers to execute arbitrary code via the slavemac parameter. NOTE: this issue exists because of an incomplete fix for CVE-2020-10882 in which shell quotes are mishandled...

9.8CVSS7.6AI score0.76621EPSS
SaveExploits2References5
NVD
NVD
added 2020/11/08 8:15 p.m.30 views

CVE-2020-28347

tdpServer on TP-Link Archer A7 AC1750 devices before 201029 allows remote attackers to execute arbitrary code via the slavemac parameter. NOTE: this issue exists because of an incomplete fix for CVE-2020-10882 in which shell quotes are mishandled...

10CVSS9.2AI score0.76621EPSS
SaveExploits2References5
CVE
CVE
added 2020/11/08 8:0 p.m.69 views

CVE-2020-28347

CVE-2020-28347 affects TP-Link Archer A7 AC1750 (tdpServer) prior to 201029; remote code execution via the slave_mac parameter due to an incomplete fix for CVE-2020-10882. Exploitation has been demonstrated in PoC/Metasploit modules; patched versions start at 201029 (and newer). If vulnerable, up...

10CVSS9.1AI score0.76621EPSS
SaveExploits2References5Affected Software1
CNVD
CNVD
added 2020/03/26 12:0 a.m.6 views

TP-Link Archer A7 AC1750 OS Command Injection Vulnerability

The TP-Link Archer A7 AC1750 is a wireless router from China P&L TP-Link. An operating system command injection vulnerability exists in the tmpServer service in the TP-Link Archer A7 using firmware version 190726 AC1750, which stems from the program program failing to properly validate a...

9.8CVSS8.2AI score0.055EPSS
SaveExploits0
CNVD
CNVD
added 2020/03/26 12:0 a.m.20 views

TP-Link Archer A7 AC1750 Authorization Issues Vulnerability

The TP-Link Archer A7 AC1750 is a wireless router from China P&L TP-Link. An authorization issue vulnerability exists in the TP-Link Archer A7 using firmware version 190726 AC1750, which stems from a lack of proper authentication before establishing SSH port forwarding rules. An attacker could us...

9.8CVSS7.1AI score0.02457EPSS
SaveExploits0
Rows per page
Query Builder