Lucene search
+L

4724 matches found

Zero Day Initiative
Zero Day Initiative
added 2022/01/17 12:0 a.m.38 views

TP-Link TL-WA1201 DNS Response Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link TL-WA1201 wireless access points. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of DNS responses. A crafted DNS message can trigge...

8.8CVSS4.5AI score0.07743EPSS
SaveExploits0
CNNVD
CNNVD
added 2022/01/17 12:0 a.m.7 views

Tl-Wa1201 缓冲区错误漏洞

Tp-Link Tl-Wa1201 is a dual-band wireless access point from Tp-Link China. A buffer overflow vulnerability exists in the TP-Link TL-Wa1201 that stems from the product's failure to properly determine memory boundaries when processing DNS messages. An unauthenticated attacker could exploit this...

10CVSS6.2AI score0.07743EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/01/17 12:0 a.m.8 views

Tp-link TP-Link Archer C9 安全漏洞

Tp-link TP-Link Archer C9 is a wireless router from Tp-link.A security vulnerability exists in the TP-Link Archer C90, which stems from a flaw in the handling of DNS responses. An attacker could exploit the vulnerability to execute arbitrary code on an affected TP-Link Archer C90 router...

10CVSS6.2AI score0.07743EPSS
SaveExploits0References4
VulnCheck KEV
VulnCheck KEV
added 2022/01/12 12:0 a.m.5 views

VulnCheck KEV: CVE-2018-3948

An exploitable denial-of-service vulnerability exists in the URI-parsing functionality of the TP-Link TL-R600VPN HTTP server. A specially crafted URL can cause the server to stop responding to requests, resulting in downtime for the management portal. An attacker can send either an...

7.5CVSS7.1AI score0.23061EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2022/01/12 12:0 a.m.11 views

The vulnerability of TP-Link TL-WR802N router’s microprogramming software arises from the lack of measures taken to neutralize special elements used in the operating system’s command set. This allows a hacker to execute arbitrary commands.

The vulnerability of TP-Link TL-WR802N router’s microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system’s commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

5.5CVSS7.6AI score0.01947EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/01/04 12:0 a.m.6 views

The vulnerability of TP-Link TL-XVR1800L router’s microprogramming software, related to improper input validation, allows a hacker to execute arbitrary code in the target system.

The vulnerability of TP-Link’s TL-XVR1800L router software relates to improper input validation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code on the target system...

10CVSS6.1AI score
SaveExploits0References2
NVD
NVD
added 2021/12/26 1:15 a.m.43 views

CVE-2021-45608

Certain D-Link, Edimax, NETGEAR, TP-Link, Tenda, and Western Digital devices are affected by an integer overflow by an unauthenticated attacker. Remote code execution from the WAN interface TCP port 20005 cannot be ruled out; however, exploitability was judged to be of "rather significant...

9.8CVSS0.02513EPSS
SaveExploits1References2
OSV
OSV
added 2021/12/26 1:15 a.m.6 views

CVE-2021-45608

Certain D-Link, Edimax, NETGEAR, TP-Link, Tenda, and Western Digital devices are affected by an integer overflow by an unauthenticated attacker. Remote code execution from the WAN interface TCP port 20005 cannot be ruled out; however, exploitability was judged to be of "rather significant...

9.8CVSS7.9AI score0.02513EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2021/12/26 12:37 a.m.42 views

CVE-2021-45608

Certain D-Link, Edimax, NETGEAR, TP-Link, Tenda, and Western Digital devices are affected by an integer overflow by an unauthenticated attacker. Remote code execution from the WAN interface TCP port 20005 cannot be ruled out; however, exploitability was judged to be of "rather significant...

6.5CVSS9.9AI score0.02513EPSS
SaveExploits1References2
CVE
CVE
added 2021/12/26 12:37 a.m.94 views

CVE-2021-45608

CVE-2021-45608 is a buffer/integer overflow in KCodes NetUSB kernel module (SoftwareBus_dispatchNormalEPMsgOut) affecting D-Link, Edimax, NETGEAR, TP-Link, Tenda and Western Digital devices. Affected NETGEAR models include D7800 (before 1.0.1.68), R6400v2 (before 1.0.4.122), and R6700v3 (before 1...

9.8CVSS9.7AI score0.02513EPSS
SaveExploits1References2Affected Software1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2021/12/24 6:31 a.m.8 views

TP-Link TL-WR802N V4(JP) vulnerable to OS command injection

Overview TP-Link TL-WR802N is a wifi router for home networks. The firmware version 170705 is reported vulnerable to OS command injection CWE-78. Impact Any user who can login to the web interface of the affected product may execute any OS commands. Solution Update the Firmware Update to the late...

8.8CVSS7.5AI score0.01947EPSS
SaveExploits0References7
NVD
NVD
added 2021/12/23 7:15 a.m.22 views

CVE-2021-4144

TP-Link wifi router TL-WR802N V4JP, with firmware version prior to 211202, is vulnerable to OS command injection...

8.8CVSS0.01947EPSS
SaveExploits0References2
OSV
OSV
added 2021/12/23 7:15 a.m.5 views

CVE-2021-4144

TP-Link wifi router TL-WR802N V4JP, with firmware version prior to 211202, is vulnerable to OS command injection...

8.8CVSS7.1AI score0.01947EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/12/23 7:15 a.m.7 views

CVE-2021-4144

TP-Link wifi router TL-WR802N V4JP, with firmware version prior to 211202, is vulnerable to OS command injection...

8.8CVSS7.2AI score0.01947EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2021/12/23 7:15 a.m.16 views

Command injection

TP-Link wifi router TL-WR802N V4JP, with firmware version prior to 211202, is vulnerable to OS command injection...

6.5CVSS8.9AI score0.01947EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/12/23 6:30 a.m.24 views

CVE-2021-4144

TP-Link wifi router TL-WR802N V4JP, with firmware version prior to 211202, is vulnerable to OS command injection...

9.2AI score0.01947EPSS
SaveExploits0References2
CVE
CVE
added 2021/12/23 6:30 a.m.57 views

CVE-2021-4144

The CVE-2021-4144 entry applies to TP-Link TL-WR802N V4(JP) with firmware versions prior to 211202, which are vulnerable to an OS command injection. According to JVN, exploitation requires legitimate access to the device web interface, allowing an authenticated user to execute OS commands. ENISA/...

8.8CVSS8.9AI score0.01947EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2021/12/23 12:0 a.m.49 views

TP-Link TL-WR802N OS Command Injection Vulnerability

TP-Link TL-WR802N is a wireless router from China Universal Link TP-Link.TP-Link TL-WR802N V4 suffers from an operating system command injection vulnerability, which stems from the fact that TP-Link wifi router TL-WR802N V4 is vulnerable to operating system command injection attacks. No detailed...

8.8CVSS4AI score0.01947EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/12/23 12:0 a.m.5 views

TP-Link TL-WR802N 操作系统命令注入漏洞

TP-Link TL-WR802N is a wireless router from China Universal Link TP-Link.TP-Link TL-WR802N V4 suffers from an operating system command injection vulnerability, which stems from the fact that TP-Link wifi router TL-WR802N V4 is vulnerable to operating system command injection attacks. No detailed...

8.8CVSS5.7AI score0.01947EPSS
SaveExploits0References4
CNVD
CNVD
added 2021/12/21 12:0 a.m.54 views

TP-Link AX10 Configuration Error Vulnerability

TP-Link AX10 is a router from China P&L Tp-link. A misconfiguration vulnerability exists in the TP-Link AX10v1 that stems from an HTTP/1.1 misconfiguration in the web interface of the TP-Link AX10v1 that could allow an attacker to send specially crafted HTTP/0.9 packets, which could lead to a cac...

7.5CVSS7.5AI score0.02382EPSS
SaveExploits0References1
Rows per page
Query Builder