91 matches found
CVE-2024-12344 TP-Link VN020 F3v(T) FTP USER Command memory corruption
A vulnerability, which was classified as critical, was found in TP-Link VN020 F3vT TTV6.2.1021. This affects an unknown part of the component FTP USER Command Handler. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. The exploit has been disclosed to th...
CVE-2024-12344 TP-Link VN020 F3v(T) FTP USER Command memory corruption
A vulnerability, which was classified as critical, was found in TP-Link VN020 F3vT TTV6.2.1021. This affects an unknown part of the component FTP USER Command Handler. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. The exploit has been disclosed to th...
CVE-2024-12342
TP-Link VN020 F3v(T) TT_V6.2.1021 has a high-severity vulnerability in the Incomplete SOAP Request Handler for the WANIPConnection UPnP service. The issue enables denial of service via malformed SOAP requests, exploitable from the local network. Public PoCs and exploit details exist (e.g., Exploi...
TP-Link vn020-f3vt suffers from buffer overflow vulnerability
TP-LINK vn020-f3vt is a wireless modem from China P&L TP-LINK. A buffer overflow vulnerability exists in the TP-Link vn020-f3vt, which stems from the fact that incorrect manipulation of the parameter hostname can cause a stack-based buffer overflow. The vulnerability stems from a network system o...
PT-2024-39542 · Tp Link · Tp-Link Tl-Wr841Nd
Name of the Vulnerable Software and Affected Versions: TP-LINK TL-WR841ND versions up to 20240920 Description: A critical issue affects some unknown functionality of the file /userRpm/popupSiteSurveyRpm.htm. The manipulation of the ssid argument leads to a stack-based buffer overflow. This issue...
CVE-2023-31701
TP-Link TL-WPA4530 KIT V2 EU170406 and V2 EU161115 is vulnerable to Command Injection via httpRpmPlcDeviceRemove...
Alert: Active Exploitation of TP-Link, Apache, and Oracle Vulnerabilities Detected
The U.S. Cybersecurity and Infrastructure Security Agency CISA has added three flaws to the Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The security vulnerabilities are as follows - CVE-2023-1389 CVSS score: 8.8 - TP-Link Archer AX-21 Command Injection...
CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-1389 TP-Link Archer AX-21 Command Injection Vulnerability CVE-2021-45046 Apache Log4j2 Deserialization of Untrusted Data Vulnerability CVE-2023-21839 Oracle...
CVE-2021-4144
TP-Link wifi router TL-WR802N V4JP, with firmware version prior to 211202, is vulnerable to OS command injection...
Tp-link TP-Link TL-SG2005和TP-Link TL-SG2008 跨站请求伪造漏洞
Tp-link TP-Link TL-SG2005 and TP-Link TL-SG2008 are both switches from China's Tp-link. A cross-site request forgery vulnerability exists in multiple Tp-Link models. The vulnerability stems from the lack of authentication of sensitive URLs within the switch, which allows an attacker to modify...
PT-2016-61: Denial of Service in the web interface to TP-Link wireless devices control system
The specialists of the Positive Research center have detected a Denial of Service vulnerability in the web interface to TP-Link wireless devices control system. An attacker can cause a full denial of service of the server used for the web interface to wireless devices control system via the speci...