CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-1389 TP-Link Archer AX-21 Command Injection Vulnerability CVE-2021-45046 Apache Log4j2 Deserialization of Untrusted Data Vulnerability CVE-2023-21839 Oracle...

TP-Link Archer AX-21 Command Injection Vulnerability

TP-Link Archer AX-21 contains a command injection vulnerability that allows for remote code execution...

Binary Vulnerability in TP-LINK TL-WR841N

The TP-LINK TL-WR841N is a classic 11n wireless router from TP-Link. A binary vulnerability exists in the TP-LINK TL-WR841N, which can be exploited by attackers to cause a denial-of-service attack...

(Pwn2Own) TP-Link Archer AX21 merge_country_config Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer AX21 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the mergecountryconfig function. The issue results from the lack o...

(Pwn2Own) TP-Link AX1800 hotplugd Firewall Rule Race Condition Vulnerability

This vulnerability allows remote attackers to gain access to LAN-side services on affected installations of TP-Link Archer AX21 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the hotplugd daemon. The issue results from firewall rule handling...

The vulnerability of the MiniDLNA service in the TPDLNA/files.db file of TP-Link Archer AX20 (AX1800) routers allows a hacker to execute arbitrary code.

The vulnerability of the MiniDLNA service in the TPDLNA/files.db file on TP-Link Archer AX20 AX1800 routers is caused by a buffer overflow in the stack. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

CVE-2022-37255

TP-Link Tapo C310 1.3.0 devices allow access to the RTSP video feed via credentials of User --- and Password TPL075526460603...

CVE-2022-37255

TP-Link Tapo C310 1.3.0 devices allow access to the RTSP video feed via credentials of User --- and Password TPL075526460603...

Default credentials

TP-Link Tapo C310 1.3.0 devices allow access to the RTSP video feed via credentials of User --- and Password TPL075526460603...

CVE-2022-37255

CVE-2022-37255 affects TP-Link Tapo C310 v1.3.0 (and earlier) with unauthorised RTSP video stream access when default credentials are used. The vulnerability allows access to the RTSP feed using the credentials User --- / Password TPL075526460603, as documented in multiple sources (Exploit-DB, Pa...

CVE-2022-37255

TP-Link Tapo C310 1.3.0 devices allow access to the RTSP video feed via credentials of User --- and Password TPL075526460603...

CVE-2022-37255

TP-Link Tapo C310 1.3.0 devices allow access to the RTSP video feed via credentials of User --- and Password TPL075526460603...

VulnCheck KEV: CVE-2023-1389

TP-Link Archer AX-21 contains a command injection vulnerability that allows for remote code execution...

The vulnerability of microprogrammed network devices from Cisco, NetGear, Mercury, Huawei, TP-Link, H3C, Tenda, Ruijie arises from the lack of proper filtering for fake ICMP messages. This allows attackers to execute spoofing attacks.

The vulnerability of microprogrammed network devices from Cisco, NetGear, Mercury, Huawei, TP-Link, H3C, Tenda, and Ruijie relates to the lack of proper filtering for fake ICMP messages. Exploiting this vulnerability allows a remote attacker to execute a spoofing attack...

CVE-2023-28368

TP-Link L2 switch T2600G-28SQ firmware versions prior to 'T2600G-28SQUNV11.0.6 Build 20230227' uses vulnerable SSH host keys. A fake device may be prepared to spoof the affected device with the vulnerable host key.If the administrator may be tricked to login to the fake device, the credential...

CVE-2023-28368

TP-Link L2 switch T2600G-28SQ firmware versions prior to 'T2600G-28SQUNV11.0.6 Build 20230227' uses vulnerable SSH host keys. A fake device may be prepared to spoof the affected device with the vulnerable host key.If the administrator may be tricked to login to the fake device, the credential...

Design/Logic Flaw

TP-Link L2 switch T2600G-28SQ firmware versions prior to 'T2600G-28SQUNV11.0.6 Build 20230227' uses vulnerable SSH host keys. A fake device may be prepared to spoof the affected device with the vulnerable host key.If the administrator may be tricked to login to the fake device, the credential...

CVE-2023-28368

TP-Link L2 switch T2600G-28SQ firmware versions prior to 'T2600G-28SQUNV11.0.6 Build 20230227' uses vulnerable SSH host keys. A fake device may be prepared to spoof the affected device with the vulnerable host key.If the administrator may be tricked to login to the fake device, the credential...

CVE-2023-28368

TP-Link L2 switch T2600G-28SQ firmware versions prior to 'T2600G-28SQUNV11.0.6 Build 20230227' uses vulnerable SSH host keys. A fake device may be prepared to spoof the affected device with the vulnerable host key.If the administrator may be tricked to login to the fake device, the credential...

CVE-2023-28368

The CVE concerns TP-Link L2 switch T2600G-28SQ. Affected firmware versions prior to T2600G-28SQ(UN)_V1_1.0.6 Build 20230227 use vulnerable SSH host keys, enabling a fake device to spoof the legitimate unit. If an administrator is tricked into logging into the impersonator, credential information ...