PT-2024-5357 · Tp Link · Tp-Link Tl-Sg1016De

Name of the Vulnerable Software and Affected Versions: TP-Link TL-SG1016DE version TL-SG1016DEUN V7.6 1.0.0 Build 20230616 Description: The issue is related to an authenticated stored cross-site scripting XSS that could allow an adversary to run JavaScript in an administrator's browser. This is d...

TP-LINK AX1800 Competitive Conditions Vulnerability

The TP-LINK AX1800 is a dual-band Wi-Fi 6 router from China P&L TP-LINK. The TP-LINK AX1800 suffers from a contention condition vulnerability that can be exploited by an attacker to access resources available on the LAN interface and execute arbitrary code...

CVE-2024-38471

Multiple TP-LINK products allow a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by restoring a crafted backup file. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi...

CVE-2024-38471

CVE-2024-38471 concerns multiple TP-LINK routers (e.g., Archer AX3000, AXE75, AX5400, Air R5, AXE5400) with an OS command injection vulnerability. The issue allows a network-adjacent attacker who has administrative privileges to execute arbitrary OS commands by restoring a crafted backup file. Th...

Multiple TP-Link products vulnerable to OS command injection

Overview Multiple products provided by TP-LINK contains an OS command injection vulnerability CWE-78 related to the backup/restore function. Chuya Hayakawa of 00One, Inc. reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact A user who logs in to the affected...

TP-LINK ER7206 Command Execution Vulnerability

The TP-LINK ER7206 is a multi-function Gigabit router from China P&L TP-LINK. A command execution vulnerability exists in the TP-Link ER7206 Omada Gigabit VPN Router version 1.4.1 Build 20240117, which stems from the presence of residual debugging code that can be exploited by an attacker to caus...

PT-2024-5005 · Tp Link · Tp-Link Archer Ax3000 +3

Name of the Vulnerable Software and Affected Versions: TP-LINK products affected versions not specified TP-Link Archer AX3000 TP-Link Archer AXE75 TP-Link Archer AX5400 TP-Link Archer Air R5 TP-Link Archer AXE5400 Description: The issue allows a network-adjacent attacker with administrative...

TP-Link Archer AX3000 Security Vulnerability

TP-LINK Archer AX3000 is a wireless router from China P&L TP-LINK. A security vulnerability exists in the TP-Link Archer AX3000, which stems from the presence of an operating system command injection vulnerability that allows an attacker to execute arbitrary operating system commands by restoring...

Multiple vulnerabilities in TP-Link Omada system could lead to root access

The TP-Link Omada system is a software-defined networking solution for small to medium-sized businesses. It touts cloud-managed devices and local management for all Omada devices. The supported devices in this ecosystem vary greatly but include wireless access points, routers, switches, VPN devic...

CVE-2024-21827

A leftover debug code vulnerability exists in the cliserver debug functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.4.1 Build 20240117 Rel.57421. A specially crafted series of network requests can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger...

CVE-2024-21827

A leftover debug code vulnerability exists in the cliserver debug functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.4.1 Build 20240117 Rel.57421. A specially crafted series of network requests can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger...

CVE-2024-21827

A leftover debug code vulnerability exists in the cliserver debug functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.4.1 Build 20240117 Rel.57421. A specially crafted series of network requests can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger...

CVE-2024-21827

A leftover debug code vulnerability exists in the cliserver debug functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.4.1 Build 20240117 Rel.57421. A specially crafted series of network requests can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger...

CVE-2024-21827

CVE-2024-21827 affects Tp-Link ER7206 Omada Gigabit VPN Router (1.4.1 Build 20240117 Rel.57421). The vulnerability resides in the cli_server debug functionality, where a hidden/legacy debug path can be triggered via crafted network requests to achieve arbitrary command execution. Talos details a ...

Tp-Link ER7206 Omada Gigabit VPN Router cli_server debug leftover debug code vulnerability

Talos Vulnerability Report TALOS-2024-1947 Tp-Link ER7206 Omada Gigabit VPN Router cliserver debug leftover debug code vulnerability June 25, 2024 CVE Number CVE-2024-21827 SUMMARY A leftover debug code vulnerability exists in the cliserver debug functionality of Tp-Link ER7206 Omada Gigabit VPN...

TP-LINK ER7206 安全漏洞

The TP-LINK ER7206 is a multi-function Gigabit router from China P&L TP-LINK. A command execution vulnerability exists in the TP-Link ER7206 Omada Gigabit VPN Router version 1.4.1 Build 20240117, which stems from the presence of residual debugging code that can be exploited by an attacker to caus...

PT-2024-32031 · Tp Link · Tp-Link Kasa Kp125M

Name of the Vulnerable Software and Affected Versions: TP-Link Kasa KP125M version 1.0.3 Description: An issue in the TP-Link MQTT Broker and API gateway allows attackers to establish connections by impersonating devices owned by other users. This impersonation can lead to unauthorized access...

The vulnerability of TP-Link Tether and TP-Link Tapo network device management and configuration software is related to errors in the certificate validation process, allowing attackers to perform a “Man-in-the-Middle” attack.

The vulnerability of TP-Link Tether and TP-Link Tapo network device management and configuration software is related to errors in the certificate validation process. Exploiting this vulnerability can allow a remote attacker to perform a Man-in-the-Middle MITM attack...

TP-Link TL-7DR5130 Security Bypass Vulnerability

The TP-Link TL-7DR5130 is a wireless router from China P&L TP-LINK. The TP-Link TL-7DR5130 suffers from a security bypass vulnerability that can be exploited by an attacker to hijack traffic between the victim and any remote server by sending a spoofed ICMP redirect message...

CVE-2024-37662

TP-LINK TL-7DR5130 v1.0.23 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same WLAN as the victim can disconnect or hijack the traffic between the victim and any remote server by sending out forged TCP RST messages to evict NAT mappings in the router...