CVE-2019-18993

OpenWrt 18.06.4 is affected by a stored/reflected XSS vulnerability in the web UI, allowing an attacker to inject scripts via the New port forward Name field targeting the cgi-bin/luci/admin/network/firewall/forwards URI (e.g., on TP-Link Archer C7). The issue stems from insufficient input valida...

CVE-2019-18993

OpenWrt 18.06.4 allows XSS via the "New port forward" Name field to the cgi-bin/luci/admin/network/firewall/forwards URI this can occur, for example, on a TP-Link Archer C7 device...

PT-2019-15743 · Tp Link +1 · Tp-Link Archer C7 +1

Name of the Vulnerable Software and Affected Versions: OpenWrt version 18.06.4 Description: The issue allows for XSS via the Name fields in the /cgi-bin/luci/admin/network/firewall/rules API endpoint, specifically in the "Open ports on router", "New forward rule", and "New Source NAT" fields. Thi...

PT-2019-15744 · Tp Link +1 · Tp-Link Archer C7 +1

Name of the Vulnerable Software and Affected Versions: OpenWrt version 18.06.4 Description: The issue allows for XSS via the "New port forward" Name field to the "cgi-bin/luci/admin/network/firewall/forwards" URI. This can occur on devices such as the TP-Link Archer C7. Recommendations: For OpenW...

TP-Link TL-WR841N Buffer Overflow Vulnerability

The TP-Link TL-WR841N is a wireless router from China P&L TP-Link. A buffer overflow vulnerability exists in the web service listening on TCP port 80 by default in the TP-LINK TL-WR841N. The vulnerability originates when a network system or product performs an operation on memory without properly...

TP-LINK TL-WR841N Web Service http_parser_main Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-LINK TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 80 by default. When parsing the Hos...

TP-Link Archer VR300 1 Cross Site Scripting Vulnerability

Exploit for hardware platform in category web applications I. VULNERABILITY ------------------------- Stored XSS Vulnerability on TP-Link Archer VR300 v1 - firmware version: 1.3.0 0.8.0 v007b.1 build 180905 Rel.55344n II. CVE REFERENCE ------------------------- - III. VENDOR...

TP-Link Archer VR300 1 Cross Site Scripting

I. VULNERABILITY ------------------------- Stored XSS Vulnerability on TP-Link Archer VR300 v1 - firmware version: 1.3.0 0.8.0 v007b.1 build 180905 Rel.55344n II. CVE REFERENCE ------------------------- - III. VENDOR ------------------------- https://www.tp-link.com/ IV. TIMELINE...

CVE-2013-4654

Symlink Traversal vulnerability in TP-LINK TL-WDR4300 and TL-1043ND...

Design/Logic Flaw

Symlink Traversal vulnerability in TP-LINK TL-WDR4300 and TL-1043ND...

CVE-2013-4654

CVE-2013-4654 is a symlink traversal vulnerability affecting TP-LINK TL-WDR4300 and TL-1043ND. The CVE entry describes a path traversal flaw enabling unauthorized access with network access and no user interaction, with high to critical impact (Confidentiality, Integrity, Availability). The NVD d...

CVE-2013-4654

Symlink Traversal vulnerability in TP-LINK TL-WDR4300 and TL-1043ND...

Denial of Service Vulnerability in TP-Link AC1900 Routers

The TP-Link AC1900 is a mini wireless router from China P&L TP-Link. The TP-Link AC1900 suffers from a denial of service vulnerability that can be exploited by attackers to cause a denial of service...

Denial of Service Vulnerability in TL-WR840N

The TL-WR840N is a mini wireless router from China's TP-Link. The TL-WR840N suffers from a denial of service vulnerability that can be exploited by attackers to cause a denial of service...

The vulnerability of the ipAddrDispose function in TP-Link router microprogramming systems such as TL-WR940N and TL-WR941ND allows attackers to escalate their privileges and execute arbitrary code.

The vulnerability of the ipAddrDispose function in TP-Link’s router software models TL-WR940N and TL-WR941ND arises due to an overflow in the buffer on the stack. Exploiting this vulnerability allows a remote attacker to enhance their privileges and execute arbitrary code by sending specially...

TP-Link TL-WDR4300 Cross-Site Request Forgery Vulnerability (CNVD-2019-40473)

The TP-Link TL-WDR4300 is a wireless router from China P&L TP-Link. A cross-site request forgery vulnerability exists in the TP-Link TL-WDR4300 version 3.13.31. The vulnerability stems from a WEB application that does not adequately validate that a request is coming from a trusted user, and can b...

The vulnerability in the web interface of TP-Link’s router software, TL-WR1043ND, allows a hacker to gain full control over the device.

The vulnerability of the web interface for TP-Link TL-WR1043ND microprogramming device lies in the deficiencies of its authentication procedures. Exploiting this vulnerability allows a malicious actor to gain full control over the device by sending a specially crafted file...

CVE-2013-4848

TP-Link TL-WDR4300 version 3.13.31 has multiple CSRF vulnerabilities...

Cross site request forgery (csrf)

TP-Link TL-WDR4300 version 3.13.31 has multiple CSRF vulnerabilities...

CVE-2013-4848

CVE-2013-4848 concerns TP-Link TL-WDR4300 (v3.13.31) with multiple CSRF vulnerabilities in the router’s web management interface. Connected sources consistently describe cross-site request forgery affecting the device, stemming from inadequate validation in the web application that could enable u...