4882 matches found
CVE-2023-31188
CVE-2023-31188 affects TP-LINK Archer C50, Archer C55, and Archer C20 JP firmware. The root cause is a failure to neutralize special elements in the OS command path, allowing a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected firmwares include Archer C50(JP)_V3_2...
CVE-2023-40357
Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer AX50 firmware versions prior to 'Archer AX50JPV1230529', Archer A10 firmware versions prior to 'Archer A10JPV2230504', Archer AX10 firmware...
CVE-2023-40357
Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer AX50 firmware versions prior to 'Archer AX50JPV1230529', Archer A10 firmware versions prior to 'Archer A10JPV2230504', Archer AX10 firmware...
CVE-2023-40357
CVE-2023-40357 affects multiple TP-LINK routers (Archer AX50, A10, AX10, AX11000). The issue stems from improper filtration of command-related characters, allowing a network-adjacent authenticated attacker to execute arbitrary OS commands via the device. Affected firmware versions are: Archer AX5...
TP-LINK Archer C50 OS Command Injection Vulnerability
TP-LINK Archer C50 is a wireless router from China P&L TP-LINK. An operating system command injection vulnerability exists in firmware versions prior to TP-LINK Archer C50JPV3230505, Archer C55JPV1230506, and Archer C20JP V1230616, which stems from a vulnerability that allows network-adjacent...
TP-LINK Operating System Command Injection Vulnerability in Multiple Products
TP-LINK TL-WR841N and others are products of China P&L TP-LINK.TP-LINK TL-WR841N is a wireless router.TP-LINK TL-WR802N is a wireless router.TP-LINK TL-WR902AC is an Ac750 Travel Router. A security vulnerability exists in multiple TP-LINK products that originates from a vulnerability that allows...
PT-2023-25591 · Tp Link · Tl-Wr802N +2
Name of the Vulnerable Software and Affected Versions: TL-WR802N versions prior to TL-WR802NJP V4 221008 TL-WR841N versions prior to TL-WR841NJP V14 230506 TL-WR902AC versions prior to TL-WR902ACJP V3 230506 Description: Multiple TP-LINK products allow a network-adjacent unauthenticated attacker ...
TP-LINK Archer C1200 OS Command Injection Vulnerability
The TP-LINK Archer C1200 is a wireless router from China P&L TP-LINK. A security vulnerability exists in firmware versions prior to TP-LINK Archer C1200JPV2230508, Archer C9JPV3230508, and Archer C9JPV3230508, which stems from a vulnerability that could allow a network-adjacent authenticated...
TP-LINK Archer AX6000 OS Command Injection Vulnerability
The TP-LINK Archer is a series of routers from China P&L TP-LINK. A security vulnerability exists in firmware versions prior to TP-LINK Archer AX6000JPV11.3.0 Build 20221208, which stems from a vulnerability that allows network-adjacent authenticated attackers to execute arbitrary operating syste...
TP-LINK Archer 操作系统命令注入漏洞
The TP-LINK Archer is a series of routers from China P&L TP-LINK. A command execution vulnerability exists in firmware versions prior to TP-LINK Archer AX50JPV1230529, Archer A10JPV2230504, which stems from an application failing to correctly filter constructed command special characters, command...
PT-2023-5597 · Tp Link · Archer A10 +2
Name of the Vulnerable Software and Affected Versions: Archer AX50 versions prior to Archer AX50JP V1 230529 Archer A10 versions prior to Archer A10JP V2 230504 Archer AX10 versions prior to Archer AX10JP V1.2 230508 Archer AX11000 versions prior to Archer AX11000JP V1 230523 Description: Multipl...
TP-LINK Deco M4 OS Command Injection Vulnerability
The TP-LINK Deco M4 is a wireless router from China P&L TP-LINK. A security vulnerability exists in versions prior to TP-LINK Deco M4 V21.5.8 Build 20230619, which stems from a vulnerability that allows network-adjacent authenticated attackers to execute arbitrary operating system commands...
TP-LINK Archer C5400 OS Command Injection Vulnerability
The TP-LINK Archer is a series of routers from China P&L TP-LINK. A security vulnerability exists in versions prior to TP-LINK Archer C5400 V2230506, which stems from a vulnerability that allows network-adjacent authenticated attackers to execute arbitrary operating system commands...
PT-2023-5275 · Tp Link · Tp-Link Archer A10
Name of the Vulnerable Software and Affected Versions: TP-Link Archer A10 firmware versions prior to Archer A10JP V2 230504 Description: The issue exists due to the lack of measures to neutralize special elements used in the operating system command. This allows a network-adjacent unauthenticated...
TP-Link Tapo C210 ActiveCells Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Tapo C210 IP cameras. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...
TP-LINK Smart bulb Tapo series L530 and Tapo Application Information Disclosure Vulnerability
TP-LINK Smart bulb Tapo is a smart bulb from China P&L TP-LINK. An information disclosure vulnerability exists in the TP-LINK Smart bulb Tapo series L530 and Tapo Application, which can be exploited by an attacker to obtain sensitive information via the IV component of the AES128-CBC feature...
The vulnerability of TP-Link Tapo L530 Wi-Fi light controller software lies in the lack of protection for sensitive data, allowing intruders to obtain confidential information.
The vulnerability of the Wi-Fi lamp controller software from TP-Link, the Tapo L530, lies in the lack of protection for sensitive data. Exploiting this vulnerability could allow a remote attacker to obtain confidential information through the TSKEP authentication function...
The vulnerability of the /userRpm/WlanSecurityRpm component of TP-Link router software, including models TL-WR940N, TL-WR941N, and TL-WR841N, allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the /userRpm/WlanSecurityRpm component of TP-Link’s router software, including models TL-WR940N, TL-WR941N, and TL-WR841N, is related to buffer overflow vulnerabilities. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause system failures remote...
The vulnerability of the /userRpm/AccessCtrlAccessRulesRpm component in TP-Link routers such as TL-WR940N, TL-WR941N, and TL-WR841N allows a hacker to cause service failures.
The vulnerability of the /userRpm/AccessCtrlAccessRulesRpm component in TP-Link routers such as TL-WR940N, TL-WR941N, and TL-WR841N is related to buffer overflow vulnerabilities. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
Smart lightbulb and app vulnerability puts your Wi-Fi password at risk
New research highlights another potential danger from IoT devices, with a popular make of smart light bulbs placing your Wi-Fi network password at risk. Researchers from the University of London and Universita di Catania produced a paper explaining the dangers of common IoT products. In this case...