PT-2020-14149

Name of the Vulnerable Software and Affected Versions TP-Link USB Network Server TL-PS310U versions prior to 2.079.000.t0210 Description The issue allows an attacker on the same network to elevate privileges. This is possible because the administrative password can be discovered by sniffing...

PT-2020-14152

Name of the Vulnerable Software and Affected Versions TP-Link USB Network Server TL-PS310U versions prior to 2.079.000.t0210 Description The issue allows an attacker on the same network to cause a denial-of-service of the device by sending long input values. Recommendations For versions prior to...

CVE-2020-15054: Cleartext Transmission of Sensitive Information

TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic...

PT-2020-14151

Name of the Vulnerable Software and Affected Versions TP-Link USB Network Server TL-PS310U versions prior to 2.079.000.t0210 Description The issue allows an attacker on the same network to conduct persistent XSS attacks by leveraging administrative privileges to set a crafted server name...

CVE-2020-15055: Improper Authentication

TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to bypass authentication via a web-administration request that lacks a password parameter...

CVE-2020-15057: Improper Restriction of Operations within the Bounds of a Memory Buffer

TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to denial-of-service the device via long input values...

CVE-2020-15056: Improper Neutralization of Input During Web Page Generation

TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to conduct persistent XSS attacks by leveraging administrative privileges to set a crafted server name...

PT-2020-14150

Name of the Vulnerable Software and Affected Versions TP-Link USB Network Server TL-PS310U versions prior to 2.079.000.t0210 Description The issue allows an attacker on the same network to bypass authentication via a web-administration request that lacks a password parameter. Recommendations For...