CVE-2023-46522

Summary: CVE-2023-46522 affects TP-LINK TL-WR886N (v7.0 3.0.14 Build 221115 Rel.56908n.bin) and TL-WDR7660 (2.0.30), due to a stack overflow in the deviceInfoRegister function. This is caused by a buffer overflow that can allow reading beyond allocated memory. Some sources suggest a remote attack...

CVE-2023-46536

TP-LINK TL-WR886N V7.03.0.14Build221115Rel.56908n.bin was discovered to contain a stack overflow via the function chkRegVeriRegister...

CVE-2023-46371

TP-Link device TL-WDR7660 2.0.30 and TL-WR886N 2.0.12 has a stack overflow vulnerability via the function upgradeInfoJsonToBin...

CVE-2023-46373

CVE-2023-46373 affects TP-Link TL-WDR7660 firmware 2.0.30. The vulnerability is described as a stack overflow in the deviceInfoJsonToBincauses function, with CVSS 3.1/CRITICAL (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) indicating remote network-exposed impact without user interaction. The connected PT...

CVE-2023-46373

TP-Link TL-WDR7660 2.0.30 has a stack overflow vulnerability via the function deviceInfoJsonToBincauses...

PT-2023-6571 · Tp Link · Tp-Link Tl-Wr886N +1

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WDR7660 version 2.0.30 TP-Link TL-WR886N version 2.0.12 Description: The issue is related to a stack overflow vulnerability in the upgradeInfoJsonToBin function of the TP-Link device's firmware, which can be exploited by a remote...

CVE-2023-46373

TP-Link TL-WDR7660 2.0.30 has a stack overflow vulnerability via the function deviceInfoJsonToBincauses...

CVE-2023-46371

TP-Link device TL-WDR7660 2.0.30 and TL-WR886N 2.0.12 has a stack overflow vulnerability via the function upgradeInfoJsonToBin...

PT-2023-6572 · Tp Link · Tp-Link Tl-Wdr7660

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WDR7660 version 2.0.30 Description: The issue is related to a stack overflow vulnerability via the deviceInfoJsonToBincauses function, which can be exploited by a remote attacker to execute arbitrary code. This vulnerability is als...

CVE-2023-46371

Affected devices: TP-Link TL-WDR7660 (v2.0.30) and TL-WR886N (v2.0.12). Vulnerability: stack overflow in the firmware function upgradeInfoJsonToBin, caused by reading beyond buffer boundaries. Impact (as documented): potential remote code execution; described as a critical issue with high confide...

PT-2023-6591 · Tp Link · Tp-Link Tl-Wr886N

Name of the Vulnerable Software and Affected Versions: TP-LINK TL-WR886N version 7.0 3.0.14 Build 221115 Rel.56908n.bin Description: The issue is related to a stack overflow in the chkRegVeriRegister function, which can be exploited by a remote attacker to impact the integrity, availability, and...

PT-2023-6593 · Tp Link · Tp-Link Tl-Wr886N

Name of the Vulnerable Software and Affected Versions: TP-LINK TL-WR886N version 7.0 3.0.14 Build 221115 Rel.56908n.bin Description: The issue is related to a stack overflow in the registerRequestHandle function, which can be exploited by a remote attacker to impact the integrity, availability, a...

The vulnerability of the microprogrammed software of TP-Link Archer AX50, Archer A10, Archer AX10, and Archer AX11000 Wi-Fi routers exists due to the lack of measures taken to neutralize special elements used in the operating system. This vulnerability allows a hacker to execute arbitrary commands in the operating system.

The vulnerability of TP-Link Archer AX50, Archer A10, Archer AX10, and Archer AX11000 Wi-Fi routers exists due to the lack of measures taken to neutralize specific components used in the operating system. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands in the...

The vulnerability of TP-Link Deco M4 Mesh-system’s microprogramming software lies in the lack of measures to neutralize specific elements, allowing attackers to execute arbitrary commands.

The vulnerability of Mesh-system TP-Link Deco M4’s microprogramming software is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

TP-LINK TL-ER5120G Command Execution Vulnerability

The TP-LINK TL-ER5120G is a multi-WAN port Gigabit commercial router from China P&L TP-LINK. The TP-LINK TL-ER5120G suffers from a command execution vulnerability that stems from a rule name that fails to correctly filter constructed command special characters, commands, and so on. An attacker...

The vulnerability of TP-Link Archer C50, Archer C20, and Archer C2 Wi-Fi routers lies in the fact that the operation data can be accessed outside of the buffer in memory, allowing an attacker to cause a malfunction in the device.

The vulnerability of the microprogrammed software of TP-Link Archer C50, Archer C20, and Archer C2 Wi-Fi routers lies in the fact that the operation data is written outside the buffer in memory when processing request parameters. Exploiting this vulnerability can allow a remote attacker to cause...

CVE-2023-43135

There is an unauthorized access vulnerability in TP-LINK ER5120G 4.0 2.0.0 Build 210817 Rel.80868n, which allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management...

CVE-2023-43135

There is an unauthorized access vulnerability in TP-LINK ER5120G 4.0 2.0.0 Build 210817 Rel.80868n, which allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management...

CVE-2023-43135

There is an unauthorized access vulnerability in TP-LINK ER5120G 4.0 2.0.0 Build 210817 Rel.80868n, which allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management...

Design/Logic Flaw

There is an unauthorized access vulnerability in TP-LINK ER5120G 4.0 2.0.0 Build 210817 Rel.80868n, which allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management...