CVE-2017-16960

This entry (CVE-2017-16960) concerns TP-Link devices TL-WVR, TL-WAR, TL-ER, and TL-R where remote authenticated users can execute arbitrary commands via shell metacharacters in the t_bindif parameter sent to cgi-bin/luci, related to get_device_byif in /usr/lib/lua/luci/controller/admin/interface....

CVE-2017-16957

CVE-2017-16957 affects TP-Link TL-WVR, TL-WAR, TL-ER and TL-R devices. A remote authenticated attacker can inject shell metacharacters via the iface field in the admin/diagnostic interface (cgi-bin/luci) that calls zone_get_effect_devices in /usr/lib/lua/luci/controller/admin/diagnostic.lua, trig...

CVE-2017-16957

TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the iface field of an admin/diagnostic command to cgi-bin/luci, related to the zonegeteffectdevices function in...

CVE-2017-16959

The CVE-2017-16959 vulnerability affects TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices via the locale feature in cgi-bin/luci. The issue arises from set_sysinfo/get_sysinfo in /usr/lib/lua/luci/controller/locale.lua used by uhttpd, allowing remote authenticated users to probe for existence of a...

CVE-2017-16958

The CVE affects TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices. Affected component is the admin/bridge CGI in uhttpd, where shell metacharacters in the t_bindif field passed via the admin/bridge command to cgi-bin/luci can lead to remote command execution. Root cause is input constructed to trig...

tp-link.com XSS vulnerability

Vulnerable URL: http://www.tp-link.com/us/download/TL-WN821NV2.html Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 14:45 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5017 VIP website status:| Yes Coordinat...

TP-Link TL-WA830RE - Cross-Site Scripting Vulnerability

Exploit for hardware platform in category web applications TP-LINK TL-WA830RE http://www.tp-link.com Firmware Version: 3.14.8 Build 140901 Rel.58502n Hardware Version: WA830RE v2 00000000 Tested on: Windows 10 Cross-site scripting XSS in TP-LINK TL-WA830RE https://up.traidnt.net/img/Zq5u4z.png...

TP-Link TL-WR740N - Cross-Site Scripting

TP-Link TL-WR740N - Cross-Site Scripting Exploit Title: XSS Vuln - TP-LINK TL-WR740N Date: 15/11/2017 Exploit Author: bl00dy Vendor Homepage: http://www.tp-link.com Version: TP-LINK TL-WR740N - 3.17.0 Build 140520 Rel.75075n Tested on: Windows 8.1 Cross-site scripting XSS in TP-LINK TL-WR740N Pro...

TP-Link TL-WR740N - Cross-Site Scripting Vulnerability

Exploit for hardware platform in category web applications Exploit Title: XSS Vuln - TP-LINK TL-WR740N Date: 15/11/2017 Exploit Author: bl00dy Vendor Homepage: http://www.tp-link.com Version: TP-LINK TL-WR740N - 3.17.0 Build 140520 Rel.75075n Tested on: Windows 8.1 Cross-site scripting XSS in...

TP-Link TL-WR740N - Cross-Site Scripting

Exploit Title: XSS Vuln - TP-LINK TL-WR740N Date: 15/11/2017 Exploit Author: bl00dy Vendor Homepage: http://www.tp-link.com Version: TP-LINK TL-WR740N - 3.17.0 Build 140520 Rel.75075n Tested on: Windows 8.1 Cross-site scripting XSS in TP-LINK TL-WR740N Proof of Concept: 1. Go to your wireless...

The vulnerability of the ftptpd component in the microprogramming software of TP-Link Technologies CO.,LTD.’s C2 and C20i routers allows attackers to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the ftptpd component in the C2 and C20i router microprogramming systems is related to the use of pre-installed accounts admin, guest, and test, with passwords “1234”, “guest”, and “test” respectively. Exploiting this vulnerability allows a malicious actor to compromise the...

TP-Link Wireless Router Detection (HTTP)

HTTP based detection of TP-Link Wireless Routers. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

TP-Link TL-MR3220 XSS Vulnerability (CVE-2017-15291)

TP-Link TL-MR3220 Wireless N Router devices are prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

REMOTE CODE EXECUTION (CVE-2017-13772) WALKTHROUGH ON A TP-LINK ROUTER

INTRODUCTION In this post, I will be discussing my recent findings while conducting vulnerability research on a home router: TP-Link’s WR940N home WiFi router. This post will outline the steps taken to identify vulnerable code paths, and how we can exploit those paths to gain remote code executio...

CVE-2017-13772

Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated users to execute arbitrary code via the 1 pingaddr parameter to PingIframeRpm.htm or 2 dnsserver2 parameter to WanStaticIpV6CfgRpm.htm...

Stack overflow

Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated users to execute arbitrary code via the 1 pingaddr parameter to PingIframeRpm.htm or 2 dnsserver2 parameter to WanStaticIpV6CfgRpm.htm...

CVE-2017-13772

Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated users to execute arbitrary code via the 1 pingaddr parameter to PingIframeRpm.htm or 2 dnsserver2 parameter to WanStaticIpV6CfgRpm.htm...

CVE-2017-13772

Summary (from provided sources): CVE-2017-13772 is a stack-based buffer overflow vulnerability in TP-Link WR940N routers (hardware version 4) that allows remote authenticated code execution via GET parameters, specifically ping_addr in PingIframeRpm.htm or dnsserver2 in WanStaticIpV6CfgRpm.htm. C...

TP-Link WR940N Remote Code Execution Vulnerability

The TP-Link WR940N is a SOHO wireless router. A remote code execution vulnerability exists in the TP-Link WR940N. The vulnerability can be exploited by a remote authenticated user to execute arbitrary code via the pingaddr parameter of PingIframeRpm.htm or the dnsserver2 parameter of...

TP-LINK TL-MR3220 Xss Vulnerability

O que este produto faz Compartilhe a liberdade do 3G! O Roteador Wireless N 3G/3.75G TL-MR3220 permite aos usuários compartilhar uma conexão de internet banda larga móvel 3G/3.75G com familiares e amigos enquanto estão acampando, em um hotel, e em praticamente qualquer lugar com cobertura de sina...