274 matches found
CVE-2023-46539
TP-LINK TL-WR886N V7.03.0.14Build221115Rel.56908n.bin was discovered to contain a stack overflow via the function registerRequestHandle...
TP-Link TL-WDR7660 Buffer Error Vulnerability
The TP-LINK TL-WDR7660 is a Gigabit router from China P&L TP-LINK. A buffer error vulnerability exists in the TP-Link TL-WDR7660 version 2.0.30, which stems from a stack overflow in the upgradeInfoJsonToBin function...
CVE-2023-36489
Multiple TP-LINK products allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: TL-WR802N firmware versions prior to 'TL-WR802NJPV4221008', TL-WR841N firmware versions prior to 'TL-WR841NJPV14230506', and TL-WR902AC firmware...
The vulnerability of the /userRpm/WlanSecurityRpm component of TP-Link router software, including models TL-WR940N, TL-WR941N, and TL-WR841N, allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the /userRpm/WlanSecurityRpm component of TP-Link’s router software, including models TL-WR940N, TL-WR941N, and TL-WR841N, is related to buffer overflow vulnerabilities. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause system failures remote...
The vulnerability of the pSize parameter (/userRpm/PingIframeRpm) in the microprogramming software for TP-Link TL-WR941ND allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the pSize parameter /userRpm/PingIframeRpm of the TP-Link TL-WR941ND router’s microprogramming software is related to buffer overflow vulnerabilities. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...
TP-LINK TL-WR941ND 缓冲区错误漏洞
The TP-LINK TL-WR941ND is a wireless router from China P&L TP-LINK. A security vulnerability exists in TP-LINK TL-WR941ND version V6, which originates from a buffer overflow vulnerability in the parameter pSize of the component /userRpm/PingIframeRpm...
TP-Link TL-WR940N V4 - Buffer OverFlow
Exploit Title: TP-Link TL-WR940N V4 - Buffer OverFlow Date: 2023-06-30 country: Iran Exploit Author: Amirhossein Bahramizadeh Category : hardware Dork : /userRpm/WanDynamicIpV6CfgRpm Tested on: Windows/Linux CVE : CVE-2023-36355 import requests Replace the IP address with the router's IP routerip...
Cross site request forgery (csrf)
An issue in the /userRpm/LocalManageControlRpm component of TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8/V10, and TL-WR941ND V5 allows attackers to cause a Denial of Service DoS via a crafted GET request...
New Condi Malware Hijacking TP-Link Wi-Fi Routers for DDoS Botnet Attacks
A new malware called Condi has been observed exploiting a security vulnerability in TP-Link Archer AX21 AX1800 Wi-Fi routers to rope the devices into a distributed denial-of-service DDoS botnet. Fortinet FortiGuard Labs said the campaign has ramped up since the end of May 2023. Condi is the work ...
The vulnerability of the WlanMacFilterRpm component (/userRpm/WlanMacFilterRpm.htm) of the TP-Link routers TL-WR940N, TL-WR841N, and TL-WR740N allows a malicious actor to gain unauthorized access to protected information or cause service failures.
The vulnerability of the WlanMacFilterRpm component /userRpm/WlanMacFilterRpm.htm of the TP-Link TL-WR940N, TL-WR841N, and TL-WR740N routers is related to the copying of buffers without checking the size of input data when processing the Mac key parameter. Exploiting this vulnerability can allow ...
CVE-2023-33536
TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a buffer overflow via the component /userRpm/WlanMacFilterRpm...
CVE-2023-33538
TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerability via the component /userRpm/WlanNetworkRpm . Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
PT-2023-3093 · Tp Link · Tp-Link Tl-Wr740N +2
Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR940N versions V2 through V4 TP-Link TL-WR841N versions V8 through V10 TP-Link TL-WR740N versions V1 through V2 Description: The issue is related to a buffer overflow in the FixMapCfgRpm component /userRpm/FixMapCfgRpm.htm of...
TP-LINK Archer C7 安全漏洞
The TP-LINK Archer C7 is a wireless router from China P&L TP-LINK. A security vulnerability exists in the TP-LINK Archer C7 v2enus180114 version, which stems from a problem with the component GET Request Parameter Handler that can lead to a denial of service...
CVE-2022-42433
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR841N TL-WR841NUSV14220121 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...
CVE-2022-43636
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of TP-Link TL-WR940N 6211111 3.20.1US routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by...
TP-LINK TL-WR940N 安全特征问题漏洞
The TP-LINK TL-WR940N is a wireless router from China P&L TP-LINK. The TP-Link TL-WR940N suffers from a Security Feature Issue vulnerability that stems from a lack of sufficient randomness in the serial number used for session management. An attacker could exploit the vulnerability to bypass...
TP-LINK TL-WR841N 操作系统命令注入漏洞
The TP-LINK TL-WR841N is a wireless router from China P&L TP-LINK. The TP-LINK TL-WR841N suffers from an operating system command injection vulnerability that originates from failure to properly validate a user-supplied string before executing a system call with it...
CVE-2022-24973
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n 5553 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on...
CVE-2022-24973
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n 5553 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on...