Denial of Service Vulnerability in Netgear AC1750 R6400v2

The Netgear AC1750 R6400v2 is a Wi-Fi router. A denial of service vulnerability exists in the Netgear AC1750 R6400v2. An attacker can exploit the vulnerability to cause a denial of service on the target router and its upper tier operator's router by sending a carefully constructed packet to a...

TP-Link Archer A7 AC1750 Command Injection Vulnerability

TP-Link Archer A7 AC1750 is a wireless router from TP-Link. tdpServer security vulnerability exists in TP-Link Archer A7 AC1750 devices before version 201029, which can be exploited by attackers to execute arbitrary code from mac parameters...

CVE-2020-28347

tdpServer on TP-Link Archer A7 AC1750 devices before 201029 allows remote attackers to execute arbitrary code via the slavemac parameter. NOTE: this issue exists because of an incomplete fix for CVE-2020-10882 in which shell quotes are mishandled...

CVE-2020-28347

tdpServer on TP-Link Archer A7 AC1750 devices before 201029 allows remote attackers to execute arbitrary code via the slavemac parameter. NOTE: this issue exists because of an incomplete fix for CVE-2020-10882 in which shell quotes are mishandled...

CVE-2020-28347

CVE-2020-28347 affects TP-Link Archer A7 AC1750 (tdpServer) prior to 201029; remote code execution via the slave_mac parameter due to an incomplete fix for CVE-2020-10882. Exploitation has been demonstrated in PoC/Metasploit modules; patched versions start at 201029 (and newer). If vulnerable, up...

PT-2020-16989

Name of the Vulnerable Software and Affected Versions tdpServer on TP-Link Archer A7 AC1750 devices before 201029 Description The issue allows remote attackers to execute arbitrary code via the slave mac parameter. This is due to an incomplete fix for a previous issue, where shell quotes are...

CVE-2020-28347: Improper Neutralization of Special Elements used in an OS Command

tdpServer on TP-Link Archer A7 AC1750 devices before 201029 allows remote attackers to execute arbitrary code via the slavemac parameter. NOTE: this issue exists because of an incomplete fix for CVE-2020-10882 in which shell quotes are mishandled...

TP-Link Archer A7 AC1750 OS Command Injection Vulnerability (CNVD-2020-19937)

The TP-Link Archer A7 AC1750 is a wireless router from China P&L TP-Link. An operating system command injection vulnerability exists in the tdpServer service in the TP-Link Archer A7 using firmware version 190726 AC1750, which stems from the program failing to properly validate a user-submitted...

TP-Link Archer A7 AC1750 Authorization Issues Vulnerability

The TP-Link Archer A7 AC1750 is a wireless router from China P&L TP-Link. An authorization issue vulnerability exists in the TP-Link Archer A7 using firmware version 190726 AC1750, which stems from a lack of proper authentication before establishing SSH port forwarding rules. An attacker could us...

TP-Link Archer A7 AC1750 OS Command Injection Vulnerability

The TP-Link Archer A7 AC1750 is a wireless router from China P&L TP-Link. An operating system command injection vulnerability exists in the tmpServer service in the TP-Link Archer A7 using firmware version 190726 AC1750, which stems from the program program failing to properly validate a...

CVE-2020-10883

This vulnerability allows local attackers to escalate privileges on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific...

CVE-2020-10886

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the tmpServer service, which listens on TCP port...

Hardcoded credentials

This vulnerability allows network-adjacent attackers execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the tdpServer service, which listens on UDP...

CVE-2020-10885

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of DNS responses. The issue results...

CVE-2020-10884

This vulnerability allows network-adjacent attackers execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the tdpServer service, which listens on UDP...

CVE-2020-10883

CVE-2020-10883 affects TP-Link Archer A7/AC1750 firmware 190726, via a file-system permissions flaw that allows a local attacker to escalate privileges on the router. The vulnerability is demonstrated in public materials (e.g., Metasploit/Exploit-DB modules and ZDI advisory) describing local/LAN ...

CVE-2020-10884

This CVE concerns TP-Link Archer A7 AC1750 routers running firmware 190726. Affected component is the tdpServer daemon, which listens on UDP port 20002; the issue stems from a hard-coded encryption key, enabling network-adjacent attackers to execute arbitrary code with root privileges in vulnerab...

CVE-2020-10881: Stack-based Buffer Overflow

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of DNS responses. A crafted DNS messa...

D-Link DIR-866L - Multiple Buffer Overflow Vulnerabilities

D-Link DIR-866L - Multiple Buffer Overflow Vulnerabilities Advisory Information Title: DIR-866L Buffer overflows in HNAP and send email functionalities Vendors contacted: William Brown , Patrick Cline [email protected] CVE: None Note: All these security issues have been discussed with...