CVE-2024-57357

An issue in TPLINK TL-WPA 8630 TL-WPA8630USV22.0.4 Build 20230427 allows a remote attacker to execute arbitrary code via function sub4256CC, which allows command injection by injecting 'devpwd'...

CVE-2024-57357

An issue in TPLINK TL-WPA 8630 TL-WPA8630USV22.0.4 Build 20230427 allows a remote attacker to execute arbitrary code via function sub4256CC, which allows command injection by injecting 'devpwd'...

PT-2025-6006 · Tp Link · Tplink Tl-Wpa 8630

Name of the Vulnerable Software and Affected Versions: TPLINK TL-WPA 8630 version 2.0.4 Build 20230427 Description: An issue in TPLINK TL-WPA 8630 allows a remote attacker to execute arbitrary code via function sub 4256CC, which allows command injection by injecting devpwd. Recommendations: As a...

CVE-2024-57357

An issue in TPLINK TL-WPA 8630 TL-WPA8630USV22.0.4 Build 20230427 allows a remote attacker to execute arbitrary code via function sub4256CC, which allows command injection by injecting 'devpwd'...

CVE-2024-57357

CVE-2024-57357 affects TP-LINK TL-WPA 8630 (US) model, specifically version 2.0.4 Build 20230427, where a vulnerability in function sub_4256CC enables remote command injection via the devpwd parameter, potentially allowing arbitrary code execution. Exploitation details are described as a remote c...

CVE-2024-57357

An issue in TPLINK TL-WPA 8630 TL-WPA8630USV22.0.4 Build 20230427 allows a remote attacker to execute arbitrary code via function sub4256CC, which allows command injection by injecting 'devpwd'...

PT-2023-6446 · Tp Link · Tp-Link Tl-Wr886N

Name of the Vulnerable Software and Affected Versions: TP-LINK TL-WR886N version 7.0 3.0.14 Build 221115 Rel.56908n.bin Description: The issue is related to a stack overflow via the RegisterRegister function, which can allow a remote attacker to execute arbitrary code. This is caused by a buffer...

CVE-2023-38907

An issue in TPLink Smart Bulb Tapo series L530 before 1.2.4, L510E before 1.1.0, L630 before 1.0.4, P100 before 1.5.0, and Tapo Application 2.8.14 allows a remote attacker to replay old messages encrypted with a still valid session key...

Information disclosure

An issue in TPLink Smart bulb Tapo series L530 v.1.0.0 and Tapo Application v.2.8.14 allows a remote attacker to obtain sensitive information via session key in the message function...

CVE-2023-38907

An issue in TPLink Smart Bulb Tapo series L530 before 1.2.4, L510E before 1.1.0, L630 before 1.0.4, P100 before 1.5.0, and Tapo Application 2.8.14 allows a remote attacker to replay old messages encrypted with a still valid session key...

CVE-2023-38907

CVE-2023-38907 affects TP-Link Smart Bulb Tapo series: L530 (versions before 1.2.4), L510E (before 1.1.0), L630 (before 1.0.4), P100 (before 1.5.0), and Tapo Application (2.8.14). A remote attacker can replay old messages that were encrypted with a still valid session key, potentially obtaining s...

CVE-2023-43137

TPLINK TL-ER5120G 4.0 2.0.0 Build 210817 Rel.80868n has a command injection vulnerability, when an attacker adds ACL rules after authentication, and the rule name parameter has injection points...

CVE-2023-43138

TPLINK TL-ER5120G 4.0 2.0.0 Build 210817 Rel.80868n has a command injection vulnerability, when an attacker adds NAPT rules after authentication, and the rule name has an injection point...

Command injection

TPLINK TL-ER5120G 4.0 2.0.0 Build 210817 Rel.80868n has a command injection vulnerability, when an attacker adds NAPT rules after authentication, and the rule name has an injection point...

Command injection

TPLINK TL-ER5120G 4.0 2.0.0 Build 210817 Rel.80868n has a command injection vulnerability, when an attacker adds ACL rules after authentication, and the rule name parameter has injection points...

CVE-2023-43137

TPLINK TL-ER5120G 4.0 2.0.0 Build 210817 Rel.80868n has a command injection vulnerability, when an attacker adds ACL rules after authentication, and the rule name parameter has injection points...

CVE-2023-43137

Summary : CVE-2023-43137 affects TP-LINK TL-ER5120G (firmware 4.0 2.0.0 Build 210817 Rel.80868n). The issue is a command injection in the router’s ACL handling: when an attacker adds ACL rules after authentication, the rule name parameter contains injection points that can lead to arbitrary comma...

CVE-2023-43138

TPLINK TL-ER5120G 4.0 2.0.0 Build 210817 Rel.80868n has a command injection vulnerability, when an attacker adds NAPT rules after authentication, and the rule name has an injection point...

CVE-2023-43137

TPLINK TL-ER5120G 4.0 2.0.0 Build 210817 Rel.80868n has a command injection vulnerability, when an attacker adds ACL rules after authentication, and the rule name parameter has injection points...

CVE-2023-43138

The advisory for CVE-2023-43138 covers TP-LINK TL-ER5120G (firmware 4.0 2.0.0 Build 210817 Rel.80868n). The vulnerability is a command injection occurring when an attacker, after authentication, adds NAPT rules and provides an injection-point in the rule name. Practical impact is high confidentia...