Design/Logic Flaw

On TP-Link TL-WR849N 0.9.1 4.16 devices, a remote command execution vulnerability in the diagnostics area can be exploited when an attacker sends specific shell metacharacters to the panel's traceroute feature...

CVE-2020-9374

CVE-2020-9374 affects TP-Link TL-WR849N device with firmware version 0.9.1 4.16. The vulnerability is a remote command execution in the diagnostics area triggered by sending shell metacharacters to the panel’s traceroute feature, indicating a command-injection flaw in the diagnostics path. Exploi...

CVE-2020-9374

On TP-Link TL-WR849N 0.9.1 4.16 devices, a remote command execution vulnerability in the diagnostics area can be exploited when an attacker sends specific shell metacharacters to the panel's traceroute feature...

TP-Link Wi-Fi extender User-Agent Header Injection CVE-2019-7406

A pre-authentication command injection vulnerability in TP-Link Wi-Fi extenders allows commands to be executed as root. The injection occurs when the User-Agent header of a request is passed to an execve system call. TP-Link RE365 Wi-Fi extender with firmware version 1.0.2, build 20180213 Rel...

TP-Link TP-SG105E reboot.cgi reboot vulnerability

The TP-Link TP-SG105E is a TP-LINK router. A security vulnerability exists in Web Management in TP-Link TP-SG105E V4 version 1.0.0 Build 20181120. An attacker can exploit this vulnerability by sending a request to reboot.cgi to reboot the device...

CVE-2019-16893

The Web Management of TP-Link TP-SG105E V4 1.0.0 Build 20181120 devices allows an unauthenticated attacker to reboot the device via a reboot.cgi request...

CVE-2019-16893

The Web Management of TP-Link TP-SG105E V4 1.0.0 Build 20181120 devices allows an unauthenticated attacker to reboot the device via a reboot.cgi request...

CVE-2013-2646

TP-LINK TL-WR1043ND V1120405 devices contain an unspecified denial of service vulnerability...

Server side request forgery (ssrf)

The Web Management of TP-Link TP-SG105E V4 1.0.0 Build 20181120 devices allows an unauthenticated attacker to reboot the device via a reboot.cgi request...

Denial of service

TP-LINK TL-WR1043ND V1120405 devices contain an unspecified denial of service vulnerability...

CVE-2013-2646

CVE-2013-2646 affects TP-LINK TL-WR1043ND V1_120405 devices, described as an unspecified denial-of-service vulnerability. The provided documents do not disclose the underlying cause, affected firmware versions, attack vectors, exploit availability, or remediation steps. CVSS data (NVD) is present...

CVE-2013-2646

TP-LINK TL-WR1043ND V1120405 devices contain an unspecified denial of service vulnerability...

CVE-2019-16893

The Web Management of TP-Link TP-SG105E V4 1.0.0 Build 20181120 devices allows an unauthenticated attacker to reboot the device via a reboot.cgi request...

CVE-2019-16893

CVE-2019-16893 affects the TP-Link TP-SG105E V4 with firmware 1.0.0 Build 20181120. The vulnerability allows an unauthenticated attacker to reboot the device by sending a request to reboot.cgi (e.g., via POST with reboot_op=reboot). Multiple sources corroborate an unauthenticated remote reboot pa...

CVE-2013-2572

A Security Bypass vulnerability exists in TP-LINK IP Cameras TL-SC 3130, TL-SC 3130G, 3171G, 4171G, and 3130 1.6.18P12 due to default hard-coded credentials for the administrative Web interface, which could let a malicious user obtain unauthorized access to CGI files...

CVE-2013-2573

A Command Injection vulnerability exists in the ap parameter to the /cgi-bin/mft/wirelessmft.cgi file in TP-Link IP Cameras TL-SC 3130, TL-SC 3130G, 3171G. and 4171G 1.6.18P12s, which could let a malicious user execute arbitrary code...

Security feature bypass

A Security Bypass vulnerability exists in TP-LINK IP Cameras TL-SC 3130, TL-SC 3130G, 3171G, 4171G, and 3130 1.6.18P12 due to default hard-coded credentials for the administrative Web interface, which could let a malicious user obtain unauthorized access to CGI files...

Command injection

A Command Injection vulnerability exists in the ap parameter to the /cgi-bin/mft/wirelessmft.cgi file in TP-Link IP Cameras TL-SC 3130, TL-SC 3130G, 3171G. and 4171G 1.6.18P12s, which could let a malicious user execute arbitrary code...

CVE-2013-2573

TP-Link IP cameras with firmware v1.6.18P12 and below (TL-SC 3130, TL-SC 3130G, TL-SC 3171G, TL-SC 4171G) are affected by CVE-2013-2573 due to an OS command injection in /cgi-bin/mft/wireless_mft.cgi (parameter ap) that can be exploited using hard-coded credentials in Boa Web Server. This allows ...

CVE-2013-2573

A Command Injection vulnerability exists in the ap parameter to the /cgi-bin/mft/wirelessmft.cgi file in TP-Link IP Cameras TL-SC 3130, TL-SC 3130G, 3171G. and 4171G 1.6.18P12s, which could let a malicious user execute arbitrary code...