CVE-2021-31658

TP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is affected by an Array index error. The interface that provides the "device description" function only judges the length of the received data, and does not filter special characters. This vulnerability will cause the application t...

Design/Logic Flaw

TP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is affected by an Array index error. The interface that provides the "device description" function only judges the length of the received data, and does not filter special characters. This vulnerability will cause the application t...

Cross site request forgery (csrf)

TP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is vulnerable to Cross Site Request Forgery CSRF. All configuration information is placed in the URL, without any additional token authentication information. A malicious link opened by the switch administrator may cause the passwo...

CVE-2021-31659

CVE-2021-31659 affects TP-Link TL-SG2005 and TL-SG2008 (1.0.0 Build 20180529 Rel.40524). The root cause is a CSRF vulnerability where sensitive configuration is in the URL and no token authentication is required, enabling a crafted link to modify the switch password and tamper configuration. Expl...

CVE-2021-31659

TP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is vulnerable to Cross Site Request Forgery CSRF. All configuration information is placed in the URL, without any additional token authentication information. A malicious link opened by the switch administrator may cause the passwo...

CVE-2021-31658

The CVE-2021-31658 entry concerns TP-Link TL-SG2005 and TL-SG2008 (version 1.0.0 Build 20180529 Rel.40524). The vulnerability is an array index error in the interface that provides the Device Description, which only checks data length and does not filter special characters. This can cause the app...

CVE-2021-31658

TP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is affected by an Array index error. The interface that provides the "device description" function only judges the length of the received data, and does not filter special characters. This vulnerability will cause the application t...

TP-Link TL-SG2005和TP-Link TL-SG2008 输入验证错误漏洞

Tp-link TP-Link TL-SG2005 and TP-Link TL-SG2008 are both switches from Tp-link. A security vulnerability exists in TP-Link TL-SG2005 and TL-SG2008. The vulnerability originates from version 1.0.0 of TL-SG2005 and TL-SG2008, which is affected by an array indexing error, whereby the interfaces that...

Tp-link TP-Link TL-SG2005和TP-Link TL-SG2008 跨站请求伪造漏洞

Tp-link TP-Link TL-SG2005 and TP-Link TL-SG2008 are both switches from China's Tp-link. A cross-site request forgery vulnerability exists in multiple Tp-Link models. The vulnerability stems from the lack of authentication of sensitive URLs within the switch, which allows an attacker to modify...

TP-Link WR2041 Buffer Overflow (CVE-2021-26827)

A buffer overflow vulnerability exists in TP-Link WR2041. Successful exploitation of this vulnerability could allow a remote attacker to cause an application crash...

Stack Overflow Vulnerability in Multiple TPLINK Routers

The TP-Link TL-WDR5620 is a smart router.The TP-Link TL-WDR5650 is a dual-band wireless router.The TP-LINK TL-WR842N is a wireless router.The TP-link TL-WDR7660, TL-WDR7620, TL-WDR7661, TL-WDR7650 and the TL-R470P-AC are all gigabit version routers.TP-link TL-WA933RE is a cellular wireless...

TP-Link Archer C1200 Cross-Site Scripting Vulnerability (CNVD-2022-21173)

TP-Link Archer C1200 is a wireless dual-band Gigabit router. a cross-site scripting vulnerability exists in TP-Link Archer. A remote attacker can exploit this vulnerability to execute arbitrary code...

CVE-2020-17891

TP-Link Archer C1200 firmware version 1.13 Build 2018/01/24 rel.52299 EU has a XSS vulnerability allowing a remote attacker to execute arbitrary code...

CVE-2020-17891

TP-Link Archer C1200 firmware version 1.13 Build 2018/01/24 rel.52299 EU has a XSS vulnerability allowing a remote attacker to execute arbitrary code...

Cross site scripting

TP-Link Archer C1200 firmware version 1.13 Build 2018/01/24 rel.52299 EU has a XSS vulnerability allowing a remote attacker to execute arbitrary code...

CVE-2020-17891

The CVE-2020-17891 entry concerns a Cross-Site Scripting (XSS) vulnerability in the TP-Link Archer C1200 firmware (version 1.13 Build 2018/01/24 rel.52299 EU). According to the connected records, this flaw allows a remote attacker to execute arbitrary code, indicating impact to the device via XSS...

CVE-2020-17891

TP-Link Archer C1200 firmware version 1.13 Build 2018/01/24 rel.52299 EU has a XSS vulnerability allowing a remote attacker to execute arbitrary code...

Tp-link TP-Link Archer C1200 跨站脚本漏洞

TP-Link Archer C1200 is a wireless dual-band Gigabit router. a cross-site scripting vulnerability exists in TP-Link Archer. A remote attacker can exploit this vulnerability to execute arbitrary code...

Denial of Service Vulnerability in TP-Link TL-WR940N

The TL-WR940N is a wireless router. A denial of service vulnerability exists in the TP-Link TL-WR940N, which can be exploited by an attacker to cause a program crash...

TP-LINK TL-ER8820T suffers from weak password vulnerability

The TL-ER8820T is a new generation of high-performance 10 Gigabit enterprise router from TP-LINK. The TP-LINK TL-ER8820T suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...