CVE-2022-24973

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n 5553 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on...

CVE-2022-24972

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n 5553 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which...

CVE-2022-24353

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1750 1.1.4 Build 20211022 rel.591035553 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetUSB.ko module. The issue...

CVE-2022-24353

TP-Link AC1750 router (v1.1.4 Build 20211022 rel.59103(5553)) is affected by a NetUSB.ko buffer over-read that allows network-adjacent attackers to execute code with root privileges. This is due to insufficient validation of user-supplied data. Affected component: NetUSB.ko; impact includes remot...

CVE-2022-24973

CVE-2022-24973 affects TP-Link TL-WR940N routers (httpd on port 80). The flaw is a stack-based buffer overflow caused by improper validation of user-supplied data length in the httpd service, allowing network-adjacent attackers to execute code with root privileges. Exploitation was described in Z...

CVE-2022-0650

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n 5553 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on...

CVE-2022-0650

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n 5553 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on...

CVE-2022-24352

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1750 prior to 211210 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetUSB.ko kernel module. The issue results from the...

CVE-2022-24973

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n 5553 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on...

CVE-2022-24353

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1750 1.1.4 Build 20211022 rel.591035553 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetUSB.ko module. The issue...

The vulnerability of TP-Link MR3020 router’s microprogramming software, related to the lack of measures taken to clean data at the control level, allows attackers to execute arbitrary commands.

The vulnerability of TP-Link MR3020 router’s microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending a specially crafted tftp request to the destination...

CVE-2022-24972

CVE-2022-24972 affects the TP-Link TL-WR940N, version 3.20.1 Build 200316 Rel.34392n (5553). The vulnerability is in the httpd service listening on port 80, caused by a lack of proper access control, enabling network-adjacent attackers to disclose stored credentials without authentication. Report...

CVE-2022-24352

The CVE-2022-24352 issue affects TP-Link AC1750 routers (versions prior to 211210). It is tied to the NetUSB.ko kernel module and stems from insufficient validation of user-supplied data, causing a read past the end of an allocated buffer. Exploitation is possible by network-adjacent attackers wi...

PT-2023-2913 · Tp Link · Tp-Link Tl-Wpa4530 Kit

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WPA4530 KIT versions V2 EU 161115 through V2 EU 170406 Description: The issue is related to Command Injection via the httpRpmPlcDeviceRemove endpoint. It is also associated with the httpRpmPlcDeviceAdd function, where the...

PT-2023-2326

Name of the Vulnerable Software and Affected Versions TP-Link Archer AX20 AX1800 and Archer AX21 versions prior to a fix TP-Link Archer AX1800 WiFi 6 Router versions prior to a fix TP-Link Archer AX21 versions prior to a fix Description The MiniDLNA service in TP-Link Archer AX20 AX1800 and Arche...

CVE-2023-27078

A command injection issue was found in TP-Link MR3020 v.1150921 that allows a remote attacker to execute arbitrary commands via a crafted request to the tftp endpoint...

Command injection

A command injection issue was found in TP-Link MR3020 v.1150921 that allows a remote attacker to execute arbitrary commands via a crafted request to the tftp endpoint...

CVE-2023-27078

A command injection issue was found in TP-Link MR3020 v.1150921 that allows a remote attacker to execute arbitrary commands via a crafted request to the tftp endpoint...

CVE-2023-27078

A command injection issue was found in TP-Link MR3020 v.1150921 that allows a remote attacker to execute arbitrary commands via a crafted request to the tftp endpoint...

PT-2023-1973 · Tp Link · Tp-Link Mr3020

Name of the Vulnerable Software and Affected Versions: TP-Link MR3020 version 1 150921 Description: A command injection issue allows a remote attacker to execute arbitrary commands via a crafted request to the "tftp endpoint". This issue is related to the lack of data cleaning measures at the...