5773 matches found
CVE-2014-9510
Cross-site request forgery CSRF vulnerability in the administration console in TP-Link TL-WR840N V1 router with firmware before 3.13.27 build 141120 allows remote attackers to hijack the authentication of administrators for requests that change router settings via a configuration file import...
CVE-2014-9510
The CVE-2014-9510 entry concerns the TP-Link TL-WR840N (V1) router administration console. A Cross-Site Request Forgery (CSRF) vulnerability exists that allows remote attackers to hijack administrator authentication for requests that change router settings via a configuration file import. Affecte...
CVE-2014-9510: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the administration console in TP-Link TL-WR840N V1 router with firmware before 3.13.27 build 141120 allows remote attackers to hijack the authentication of administrators for requests that change router settings via a configuration file import...
PT-2015-4255
Name of the Vulnerable Software and Affected Versions TP-Link TL-WR840N version prior to 3.13.27 build 141120 Description A cross-site request forgery issue exists in the administration console, allowing remote attackers to hijack administrator authentication for requests that change router...
TP-Link TL-WR840N 'Import Configuration' Option Cross-Site Request Forgery Vulnerability
The TP-Link TL-WR840N is a wireless router device. A cross-site request forgery vulnerability exists in the TP-Link TL-WR840N 'Import Configuration' option because it fails to properly validate HTTP requests. An attacker can exploit this vulnerability to perform certain unauthorized actions...
ZTE-and-TP-Link-RomPager
Date: 10-05-2014 Server Version: RomPager/4.07 UPnP/1.0 Tested Routers: ZTE ZXV10 W300 TP-Link TD-W8901G TP-Link TD-W8101G TP-Link TD-8840G Firmware: FwVer:3.11.2.175TC3086 HwVer:T14.F75.0 Tested on: Kali Linux x86 !/usr/bin/env python -- coding: utf-8 -- Exploit Title: ZTE and TP-Link RomPager D...
Immunity Canvas: CVE_2014_9222
Name| CVE20149222 ---|--- CVE| CVE-2014-9222 Exploit Pack| CANVAS Description| CVE-2014-9222 Misfortune Cookie Notes| CVE Name: CVE-2014-9222 VENDOR: Alegro Notes: This module exploits the arbitrary memory overwrite vulnerability in RomPager embedded web-server, which was originally introduced by...
CVE-2014-9350
TP-Link TL-WR740N 4 with firmware 3.17.0 Build 140520, 3.16.6 Build 130529, and 3.16.4 Build 130205 allows remote attackers to cause a denial of service httpd crash via vectors involving a "new" value in the isNew parameter to PingIframeRpm.htm...
Design/Logic Flaw
TP-Link TL-WR740N 4 with firmware 3.17.0 Build 140520, 3.16.6 Build 130529, and 3.16.4 Build 130205 allows remote attackers to cause a denial of service httpd crash via vectors involving a "new" value in the isNew parameter to PingIframeRpm.htm...
CVE-2014-9350
The CVE-2014-9350 entry affects TP-Link TL-WR740N devices. Affected firmware: 3.17.0 Build 140520, 3.16.6 Build 130529, and 3.16.4 Build 130205. The issue arises in the device’s httpd web server via the PingIframeRpm.htm page, where a crafted value in the isNew parameter can trigger a remote deni...
CVE-2014-9350
TP-Link TL-WR740N 4 with firmware 3.17.0 Build 140520, 3.16.6 Build 130529, and 3.16.4 Build 130205 allows remote attackers to cause a denial of service httpd crash via vectors involving a "new" value in the isNew parameter to PingIframeRpm.htm...
PT-2014-8953
Name of the Vulnerable Software and Affected Versions TP-Link TL-WR740N version 3.16.4 Build 130205 TP-Link TL-WR740N version 3.16.6 Build 130529 TP-Link TL-WR740N version 3.17.0 Build 140520 Description The issue allows remote attackers to cause a denial of service, resulting in an httpd crash...
CVE-2014-9350: Undefined Security Weakness
TP-Link TL-WR740N 4 with firmware 3.17.0 Build 140520, 3.16.6 Build 130529, and 3.16.4 Build 130205 allows remote attackers to cause a denial of service httpd crash via vectors involving a "new" value in the isNew parameter to PingIframeRpm.htm...
TP-Link TL-WR740N - Denial of Service
TP-Link TL-WR740N - Denial of Service TP-Link TL-WR740N Wireless Router MitM httpd Denial Of Service Vendor: TP-LINK Technologies Co., Ltd. Product web page: http://www.tp-link.us Affected version: - Firmware version: 3.17.0 Build 140520 Rel.75075n Released: 5/20/2014 - Firmware version: 3.16.6...
TP-Link TL-WR740N - Denial of Service
TP-Link TL-WR740N Wireless Router MitM httpd Denial Of Service Vendor: TP-LINK Technologies Co., Ltd. Product web page: http://www.tp-link.us Affected version: - Firmware version: 3.17.0 Build 140520 Rel.75075n Released: 5/20/2014 - Firmware version: 3.16.6 Build 130529 Rel.47286n Released:...
TP-Link TL-WR740N Denial Of Service
TP-Link TL-WR740N Wireless Router MitM httpd Denial Of Service Vendor: TP-LINK Technologies Co., Ltd. Product web page: http://www.tp-link.us Affected version: - Firmware version: 3.17.0 Build 140520 Rel.75075n Released: 5/20/2014 - Firmware version: 3.16.6 Build 130529 Rel.47286n Released:...
TP-Link TL-WR740N Wireless Router MitM httpd Denial Of Service
Exploit for hardware platform in category dos / poc TP-Link TL-WR740N Wireless Router MitM httpd Denial Of Service Vendor: TP-LINK Technologies Co., Ltd. Product web page: http://www.tp-link.us Affected version: - Firmware version: 3.17.0 Build 140520 Rel.75075n Released: 5/20/2014 - Firmware...
TP-Link TL-WR740N Wireless Router MitM httpd Denial Of Service
Summary The TL-WR740N is a combined wired/wireless network connection device integrated with internet-sharing router and 4-port switch. The wireless N Router is 802.11b&g compatible based on 802.11n technology and gives you 802.11n performance up to 150Mbps at an even more affordable price...
TP-LINK WDR4300 - Stored XSS & DoS
Advisory Information =============== Vendors Contacted: TP-LINK Vendor Patched: Yes, Firmware 140916 System Affected: N750 Wireless Dual Band Gigabit Router TL-WDR4300, might affect others. Versions Affected: 130617 , possibly earlier CVE Numbers Assigned: CVE-2014-4727, CVE-2014-4728...