Lucene search
+L

4724 matches found

CVE
CVE
added 2022/03/07 4:6 a.m.95 views

CVE-2021-44032

The vulnerability CVE-2021-44032 affects TP-Link Omada SDN Software Controller prior to version 5.0.15. The root cause is that the controller does not validate whether the requested authentication method is allowed, enabling an attacker to bypass captive portal authentication by downgrading to a ...

7.5CVSS7.7AI score0.01792EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2022/03/07 12:0 a.m.7 views

PT-2022-2572

Name of the Vulnerable Software and Affected Versions TP-Link Tapo C200 version 1.1.15 and below Description The issue is related to an unauthenticated remote code execution RCE vulnerability in the uhttpd binary, which runs by default as root. This vulnerability is caused by a lack of input data...

10CVSS9.3AI score0.72376EPSS
SaveExploits11References15
NVD
NVD
added 2022/03/04 10:15 p.m.18 views

CVE-2021-44827

There is remote authenticated OS command injection on TP-Link Archer C20i 0.9.1 3.2 v003a.0 Build 170221 Rel.55462n devices vie the XTPExternalIPv6Address HTTP parameter, allowing a remote attacker to run arbitrary commands on the router with root privileges...

9CVSS0.53956EPSS
SaveExploits2References3
Prion
Prion
added 2022/03/04 10:15 p.m.24 views

Command injection

There is remote authenticated OS command injection on TP-Link Archer C20i 0.9.1 3.2 v003a.0 Build 170221 Rel.55462n devices vie the XTPExternalIPv6Address HTTP parameter, allowing a remote attacker to run arbitrary commands on the router with root privileges...

9CVSS8.8AI score0.53956EPSS
SaveExploits2References3Affected Software1
Cvelist
Cvelist
added 2022/03/04 9:27 p.m.24 views

CVE-2021-44827

There is remote authenticated OS command injection on TP-Link Archer C20i 0.9.1 3.2 v003a.0 Build 170221 Rel.55462n devices vie the XTPExternalIPv6Address HTTP parameter, allowing a remote attacker to run arbitrary commands on the router with root privileges...

9.1AI score0.53956EPSS
SaveExploits2References3
CVE
CVE
added 2022/03/04 9:27 p.m.108 views

CVE-2021-44827

CVE-2021-44827 affects TP-Link Archer C20i (firmware 0.9.1 3.2 v003a.0 Build 170221 Rel.55462n). It enables remote authenticated OS command injection via the HTTP parameter X_TP_ExternalIPv6Address, allowing execution of arbitrary commands with root privileges. Affected device exposed over networ...

9CVSS8.8AI score0.53956EPSS
SaveExploits2References3Affected Software1
GithubExploit
GithubExploit
added 2022/03/01 3:10 p.m.844 views

Exploit for OS Command Injection in Tp-Link Tl-Wr840N_Firmware

CVE-2022-25064 TP-LINK TL-WR840N RCE via the function oal...

9.8CVSS9.9AI score0.36224EPSS
SaveExploits3
CNVD
CNVD
added 2022/03/01 12:0 a.m.91 views

Tp-link TL-WR840N has an unspecified vulnerability

Tp-link TL-WR840N is a wireless router from Tp-link, China. TP-LINK TL-WR840NES V6.20 version 180709 is vulnerable due to a lack of filtering and escaping of command parameters in the component oalstartPing. No details of the vulnerability are available at this time...

10CVSS3.6AI score0.39888EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/03/01 12:0 a.m.73 views

Tp-link TL-WR840N Command Injection Vulnerability

Tp-link TL-WR840N is a wireless router from Tp-link.TP-LINK TL-WR840NES V6.20 180709 is vulnerable due to a lack of filtering and escaping of command parameters in the component oalsetIp6DefaultRoute. No detailed vulnerability details are available at this time...

9.8CVSS3AI score0.58431EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/03/01 12:0 a.m.76 views

Tp-link TL-WR840N Remote Code Execution Vulnerability

The Tp-link TL-WR840N is a wireless router from China Pulian Tp-link.A remote code execution vulnerability exists in the Tp-link TL-WR840N, which stems from a remote code execution RCE vulnerability found to be contained via the oal wan6 setIpAddr function. No detailed vulnerability details are...

9.8CVSS3.6AI score0.36224EPSS
SaveExploits3References1
CNVD
CNVD
added 2022/03/01 12:0 a.m.35 views

Tp-link TL-WR840N integer overflow vulnerability

The Tp-link TL-WR840N is a wireless router from Tp-link, China.The Tp-link TL-WR840N is vulnerable to an integer overflow vulnerability that can be exploited by attackers to cause a denial of service DoS via a specially crafted HTTP request...

7.5CVSS4.3AI score0.03474EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/03/01 12:0 a.m.11 views

The vulnerability of the httpd daemon in the microprogramming software of TP-Link’s TL-WR940N router allows a intruder to gain unauthorized access to protected information.

The vulnerability of the httpd daemon in the microprogramming-based router software from TP-Link’s TL-WR940N is related to deficiencies in access control. Exploiting this vulnerability could allow a hacker to gain unauthorized access to protected information...

6.5CVSS6.5AI score0.00585EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/01 12:0 a.m.11 views

The vulnerability of the httpd daemon in the microprogramming software of TP-Link’s TL-WR940N router allows a hacker to execute arbitrary code.

The vulnerability of the httpd daemon in the microprogramming-based router software from TP-Link, the TL-WR940N, is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code...

7.4CVSS7.2AI score0.00724EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/01 12:0 a.m.67 views

The vulnerability of the httpd daemon in the microprogramming software of TP-Link’s TL-WR940N router allows a hacker to execute arbitrary code.

The vulnerability of the httpd daemon in the microprogramming-based router software from TP-Link, the TL-WR940N, is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code...

7.4CVSS7.2AI score0.00724EPSS
SaveExploits0References6Affected Software1
CNVD
CNVD
added 2022/02/28 12:0 a.m.54 views

Tp-link TL-WR841N Buffer Overflow Vulnerability (CNVD-2022-17026)

Tp-link TL-WR841N is a wireless router from China Pulian Tp-link.The Tp-link TL-WR841N router is vulnerable to a buffer overflow vulnerability, which stems from a stack overflow found in the dm fillObjByStr function. An attacker could exploit this vulnerability to execute arbitrary code...

10CVSS5.3AI score0.13034EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/02/28 12:0 a.m.45 views

TP-Link TL-WR902AC Buffer Overflow Vulnerability

Tp-Link Tl-Wr902Ac is an Ac750 travel router from Tp-Link in China.A buffer error vulnerability exists in the TP-Link TL-WR902AC router, which stems from a stack overflow in the function DMFillobjbystr. An unauthenticated attacker can exploit this vulnerability to execute arbitrary code...

10CVSS5.2AI score0.13034EPSS
SaveExploits1References1
GithubExploit
GithubExploit
added 2022/02/25 10:34 p.m.136 views

Exploit for OS Command Injection in Tp-Link Tl-Wr840N_Firmware

CVE-2022-25064 This script...

9.8CVSS9.6AI score0.36224EPSS
SaveExploits3
NVD
NVD
added 2022/02/25 8:15 p.m.16 views

CVE-2022-25062

TP-LINK TL-WR840NESV6.20180709 was discovered to contain an integer overflow via the function dmcheckString. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted HTTP request...

7.5CVSS0.03474EPSS
SaveExploits0References1
NVD
NVD
added 2022/02/25 8:15 p.m.29 views

CVE-2022-25061

TP-LINK TL-WR840NESV6.20180709 was discovered to contain a command injection vulnerability via the component oalsetIp6DefaultRoute...

9.8CVSS0.58431EPSS
SaveExploits1References1
NVD
NVD
added 2022/02/25 8:15 p.m.17 views

CVE-2022-25064

TP-LINK TL-WR840NESV6.20180709 was discovered to contain a remote code execution RCE vulnerability via the function oalwan6setIpAddr...

9.8CVSS0.36224EPSS
SaveExploits3References1
Rows per page
Query Builder