CVE-2023-36489

Multiple TP-LINK products allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: TL-WR802N firmware versions prior to 'TL-WR802NJPV4221008', TL-WR841N firmware versions prior to 'TL-WR841NJPV14230506', and TL-WR902AC firmware...

CVE-2023-36489

Multiple TP-LINK products allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: TL-WR802N firmware versions prior to 'TL-WR802NJPV4221008', TL-WR841N firmware versions prior to 'TL-WR841NJPV14230506', and TL-WR902AC firmware...

CVE-2023-36489

TP-LINK TL-WR802N, TL-WR841N, and TL-WR902AC are affected by a network-adjacent, unauthenticated command-injection vulnerability. The issue affects TL-WR802N firmware before JP_V4_221008, TL-WR841N firmware before JP_V14_230506, and TL-WR902AC firmware before JP_V3_230506. Public disclosures cons...

CVE-2023-31188

Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer C50 firmware versions prior to 'Archer C50JPV3230505', Archer C55 firmware versions prior to 'Archer C55JPV1230506', and Archer C20 firmwar...

CVE-2023-31188

CVE-2023-31188 affects TP-LINK Archer C50, Archer C55, and Archer C20 JP firmware. The root cause is a failure to neutralize special elements in the OS command path, allowing a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected firmwares include Archer C50(JP)_V3_2...

CVE-2023-40357

Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer AX50 firmware versions prior to 'Archer AX50JPV1230529', Archer A10 firmware versions prior to 'Archer A10JPV2230504', Archer AX10 firmware...

CVE-2023-40357

Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer AX50 firmware versions prior to 'Archer AX50JPV1230529', Archer A10 firmware versions prior to 'Archer A10JPV2230504', Archer AX10 firmware...

CVE-2023-40357

CVE-2023-40357 affects multiple TP-LINK routers (Archer AX50, A10, AX10, AX11000). The issue stems from improper filtration of command-related characters, allowing a network-adjacent authenticated attacker to execute arbitrary OS commands via the device. Affected firmware versions are: Archer AX5...

TP-LINK Operating System Command Injection Vulnerability in Multiple Products

TP-LINK TL-WR841N and others are products of China P&L TP-LINK.TP-LINK TL-WR841N is a wireless router.TP-LINK TL-WR802N is a wireless router.TP-LINK TL-WR902AC is an Ac750 Travel Router. A security vulnerability exists in multiple TP-LINK products that originates from a vulnerability that allows...

TP-LINK Archer C50 OS Command Injection Vulnerability

TP-LINK Archer C50 is a wireless router from China P&L TP-LINK. An operating system command injection vulnerability exists in firmware versions prior to TP-LINK Archer C50JPV3230505, Archer C55JPV1230506, and Archer C20JP V1230616, which stems from a vulnerability that allows network-adjacent...

TP-LINK Archer C1200 OS Command Injection Vulnerability

The TP-LINK Archer C1200 is a wireless router from China P&L TP-LINK. A security vulnerability exists in firmware versions prior to TP-LINK Archer C1200JPV2230508, Archer C9JPV3230508, and Archer C9JPV3230508, which stems from a vulnerability that could allow a network-adjacent authenticated...

TP-LINK Archer AX6000 OS Command Injection Vulnerability

The TP-LINK Archer is a series of routers from China P&L TP-LINK. A security vulnerability exists in firmware versions prior to TP-LINK Archer AX6000JPV11.3.0 Build 20221208, which stems from a vulnerability that allows network-adjacent authenticated attackers to execute arbitrary operating syste...

PT-2023-25591 · Tp Link · Tl-Wr802N +2

Name of the Vulnerable Software and Affected Versions: TL-WR802N versions prior to TL-WR802NJP V4 221008 TL-WR841N versions prior to TL-WR841NJP V14 230506 TL-WR902AC versions prior to TL-WR902ACJP V3 230506 Description: Multiple TP-LINK products allow a network-adjacent unauthenticated attacker ...

PT-2023-5597 · Tp Link · Archer A10 +2

Name of the Vulnerable Software and Affected Versions: Archer AX50 versions prior to Archer AX50JP V1 230529 Archer A10 versions prior to Archer A10JP V2 230504 Archer AX10 versions prior to Archer AX10JP V1.2 230508 Archer AX11000 versions prior to Archer AX11000JP V1 230523 Description: Multipl...

TP-LINK Archer 操作系统命令注入漏洞

The TP-LINK Archer is a series of routers from China P&L TP-LINK. A command execution vulnerability exists in firmware versions prior to TP-LINK Archer AX50JPV1230529, Archer A10JPV2230504, which stems from an application failing to correctly filter constructed command special characters, command...

TP-LINK Archer C5400 OS Command Injection Vulnerability

The TP-LINK Archer is a series of routers from China P&L TP-LINK. A security vulnerability exists in versions prior to TP-LINK Archer C5400 V2230506, which stems from a vulnerability that allows network-adjacent authenticated attackers to execute arbitrary operating system commands...

PT-2023-5275 · Tp Link · Tp-Link Archer A10

Name of the Vulnerable Software and Affected Versions: TP-Link Archer A10 firmware versions prior to Archer A10JP V2 230504 Description: The issue exists due to the lack of measures to neutralize special elements used in the operating system command. This allows a network-adjacent unauthenticated...

TP-LINK Deco M4 OS Command Injection Vulnerability

The TP-LINK Deco M4 is a wireless router from China P&L TP-LINK. A security vulnerability exists in versions prior to TP-LINK Deco M4 V21.5.8 Build 20230619, which stems from a vulnerability that allows network-adjacent authenticated attackers to execute arbitrary operating system commands...

TP-Link Tapo C210 ActiveCells Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Tapo C210 IP cameras. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

TP-LINK Smart bulb Tapo series L530 and Tapo Application Information Disclosure Vulnerability

TP-LINK Smart bulb Tapo is a smart bulb from China P&L TP-LINK. An information disclosure vulnerability exists in the TP-LINK Smart bulb Tapo series L530 and Tapo Application, which can be exploited by an attacker to obtain sensitive information via the IV component of the AES128-CBC feature...