The vulnerability of the Radio Scheduling component in the microprogramming software of Tp-Link AC1350 allows a intruder to execute arbitrary code.

The vulnerability of the Radio Scheduling component in the microprogramming software of Tp-Link AC1350 wireless access points is related to buffer overflows in the stack when processing the band parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using...

The vulnerability of the tddpd function in wireless access points Tp-Link AC1350 and Tp-Link N300 allows a hacker to execute arbitrary code with root privileges.

The vulnerability of the tddpd Enabletestmode function in wireless access points Tp-Link AC1350 and Tp-Link N300 lies in the activation of functions from an unverified controlled area. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with root privileges by sending...

TP-LINK AC1350/N300 Command Execution Vulnerability

The TP-LINK AC1350/N300 is a router from China P&L TP-LINK. A security vulnerability exists in the TP-LINK AC1350/N300, which can be exploited by an attacker to cause arbitrary commands to be executed via a series of specially crafted network requests...

Unspecified Vulnerability in TP-LINK AC1350 (CNVD-2024-23784)

The TP-LINK AC1350 is a router from China P&L TP-LINK. The TP-LINK AC1350 contains a security vulnerability that can be exploited by an attacker to cause remote code execution via a series of specially crafted HTTP requests...

TP-LINK AC1350 Denial of Service Vulnerability

The TP-LINK AC1350 is a router from China P&L TP-LINK. A security vulnerability exists in the TP-LINK AC1350, which can be exploited by an attacker to cause a denial of service in the device's web interface via a specially crafted HTTP POST request...

Unspecified Vulnerability in TP-LINK AC1350 (CNVD-2024-20286)

The TP-LINK AC1350 is a router from China P&L TP-LINK. The TP-LINK AC1350 suffers from a security vulnerability that can be exploited by an attacker to cause a reset to factory settings via a series of specially crafted network requests...

Unspecified Vulnerability in TP-LINK AC1350 (CNVD-2024-20287)

The TP-LINK AC1350 is a router from China P&L TP-LINK. The TP-LINK AC1350 suffers from a security vulnerability that can be exploited by an attacker to cause remote code execution via a series of specially crafted HTTP requests...

CVE-2023-49912

A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point EAP225 V3 v5.1.0 Build 20220926. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can make an...

CVE-2023-49907

A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point EAP225 V3 v5.1.0 Build 20220926. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can make an...

CVE-2023-49908

A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point EAP225 V3 v5.1.0 Build 20220926. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can make an...

CVE-2023-49906

A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point EAP225 V3 v5.1.0 Build 20220926. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can make an...

CVE-2023-49074

A denial of service vulnerability exists in the TDDP functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point EAP225 V3 v5.1.0 Build 20220926. A specially crafted series of network requests can lead to reset to factory settings. An attacker can send a sequence of unauthenticated...

CVE-2023-48724

A memory corruption vulnerability exists in the web interface functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point EAP225 V3 v5.1.0 Build 20220926. A specially crafted HTTP POST request can lead to denial of service of the device's web interface. An attacker can send an...

CVE-2023-49074

A denial of service vulnerability exists in the TDDP functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point EAP225 V3 v5.1.0 Build 20220926. A specially crafted series of network requests can lead to reset to factory settings. An attacker can send a sequence of unauthenticated...

CVE-2023-49074

A denial of service vulnerability exists in the TDDP functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point EAP225 V3 v5.1.0 Build 20220926. A specially crafted series of network requests can lead to reset to factory settings. An attacker can send a sequence of unauthenticated...

CVE-2023-49134

A command execution vulnerability exists in the tddpd enabletestmode functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point EAP225 V3 v5.1.0 Build 20220926 and Tp-Link N300 Wireless Access Point EAP115 V4 v5.0.4 Build 20220216. A specially crafted series of network requests can lea...

CVE-2023-48724

A memory corruption vulnerability exists in the web interface functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point EAP225 V3 v5.1.0 Build 20220926. A specially crafted HTTP POST request can lead to denial of service of the device's web interface. An attacker can send an...

CVE-2023-49910

Tp-Link AC1350 devices (EAP225 V3, and EAP115) are affected by a stack-based buffer overflow in the web interface Radio Scheduling feature. The vuln rests in the POST handler for scheduler data (/data/scheduler.association.json): when operation != read/load and input is malformed, the code builds...

CVE-2023-49911

A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point EAP225 V3 v5.1.0 Build 20220926. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can make an...

CVE-2023-49907

Talos-1888 details a stack-based buffer overflow in TP-Link AC1350 (EAP225 V3) firmware v5.1.0 Build 20220926, caused by the handling of newline-delimited POST parameters (ssid, band, profile, action) in /data/scheduler.association.json. Specifically, the vulnerability arises from unsafe copying ...