4788 matches found
CVE-2024-54127
This vulnerability exists in the TP-Link Archer C50 due to presence of terminal access on a serial interface without proper access control. An attacker with physical access could exploit this by accessing the UART shell on the vulnerable device. Successful exploitation of this vulnerability could...
CVE-2024-54127 Exposure of Wi-Fi Credentials in Plaintext in TP-Link Archer C50
This vulnerability exists in the TP-Link Archer C50 due to presence of terminal access on a serial interface without proper access control. An attacker with physical access could exploit this by accessing the UART shell on the vulnerable device. Successful exploitation of this vulnerability could...
CVE-2024-54127 Exposure of Wi-Fi Credentials in Plaintext in TP-Link Archer C50
This vulnerability exists in the TP-Link Archer C50 due to presence of terminal access on a serial interface without proper access control. An attacker with physical access could exploit this by accessing the UART shell on the vulnerable device. Successful exploitation of this vulnerability could...
CVE-2024-54127
CVE-2024-54127 concerns TP-Link Archer C50. The issue arises from terminal access on the device’s serial interface without proper access control, allowing a physically present attacker to access the UART shell and potentially obtain Wi‑Fi credentials. Connected sources corroborate that the vulner...
CVE-2024-54126 Insufficient Integrity Verification Vulnerability in TP-Link Archer C50
This vulnerability exists in the TP-Link Archer C50 due to improper signature verification mechanism in the firmware upgrade process at its web interface. An attacker with administrative privileges within the router’s Wi-Fi range could exploit this vulnerability by uploading and executing malicio...
CVE-2024-54126 Insufficient Integrity Verification Vulnerability in TP-Link Archer C50
This vulnerability exists in the TP-Link Archer C50 due to improper signature verification mechanism in the firmware upgrade process at its web interface. An attacker with administrative privileges within the router’s Wi-Fi range could exploit this vulnerability by uploading and executing malicio...
CVE-2024-54126
CVE-2024-54126 affects the TP-Link Archer C50. The root cause is an improper signature verification in the firmware upgrade process via the web interface. An attacker with administrative privileges within the router’s Wi‑Fi range can upload and execute malicious firmware, potentially resulting in...
TP-Link Archer C50 安全漏洞
The TP-LINK Archer C50 is a wireless router from China P&L TP-LINK. A security vulnerability exists in the TP-Link Archer C50 prior to version V4 240917, which stems from terminal access on the serial interface that is not properly privileged, allowing an attacker to obtain Wi-Fi credentials on t...
PT-2024-9343 · Tp Link · Tp-Link Archer C50
Name of the Vulnerable Software and Affected Versions: TP-Link Archer C50 affected versions not specified Description: The issue is related to the storage of critical information in an unencrypted manner in the web interface of the TP-Link Archer C50 Wi-Fi router. This could allow an attacker to...
PT-2024-9342 · Tp Link · Tp-Link Archer C50
Name of the Vulnerable Software and Affected Versions: TP-Link Archer C50 affected versions not specified Description: The issue is related to the improper signature verification mechanism in the firmware upgrade process at the web interface of the TP-Link Archer C50. This allows an attacker with...
The vulnerability of the DHCP server of TP-Link’s Wi-Fi router software, the VN020 F3v(T), allows a intruder to cause a service failure.
The vulnerability of the DHCP server of TP-Link’s Wi-Fi router model VN020 F3vT lies in the issue where operations are performed outside the buffer in memory when processing the hostname parameter. Exploiting this vulnerability allows an attacker to cause a service failure by sending specially...
CVE-2024-53375
An Authenticated Remote Code Execution RCE vulnerability affects the TP-Link Archer router series. A vulnerability exists in the "tmpgetsites" function of the HomeShield functionality provided by TP-Link. This vulnerability is still exploitable without the activation of the HomeShield functionali...
CVE-2024-53375
An Authenticated Remote Code Execution RCE vulnerability affects the TP-Link Archer router series. A vulnerability exists in the "tmpgetsites" function of the HomeShield functionality provided by TP-Link. This vulnerability is still exploitable without the activation of the HomeShield functionali...
TP-Link Archer 安全漏洞
TP-LINK Archer is a series of routers from China's Universal Link TP-LINK. A security vulnerability exists in TP-Link Archer that stems from the presence of a certified Remote Code Execution RCE vulnerability...
CVE-2024-53375
An Authenticated Remote Code Execution RCE vulnerability affects the TP-Link Archer router series. A vulnerability exists in the "tmpgetsites" function of the HomeShield functionality provided by TP-Link. This vulnerability is still exploitable without the activation of the HomeShield functionali...
CVE-2024-53375
CVE-2024-53375 affects TP-Link Archer routers via HomeShield. An authenticated RCE exists in the tmp_get_sites function; the vulnerability is exploitable remotely without enabling HomeShield. The exploit path is through the /admin/smart_network?form=tmp_avira endpoint, where ownerId is passed to ...
CVE-2024-53623
Incorrect access control in the component l00.xml of TP-Link ARCHER-C7 v5 allows attackers to access sensitive information...
CVE-2024-53623
Incorrect access control in the component l00.xml of TP-Link ARCHER-C7 v5 allows attackers to access sensitive information...
CVE-2024-53623
Incorrect access control in the component l00.xml of TP-Link ARCHER-C7 v5 allows attackers to access sensitive information...
CVE-2024-53623
The CVE-2024-53623 issue affects TP-Link ARCHER-C7 router (v5), arising from an access control flaw in the l_0_0.xml component that may allow an attacker to access sensitive information. Reports from PT-2024-9088 confirm v5 as affected and describe a remote access risk. Remediation elements prese...