CVE-2018-17007

An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services e.g., inetd, HTTP, DNS, and UPnP via long JSON data for wireless wlanwds2g ssid...

CVE-2018-17006

This entry concerns TP-Link TL-WR886N devices (firmware 6.0 2.3.4 and 7.0 1.1.0) where authenticated attackers can crash router services (inetd, HTTP, DNS, UPnP) by sending long JSON data to the firewall lan_manage mac2. The vulnerability is triggered by crafted input that overwhelms service hand...

CVE-2018-17017

An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services e.g., inetd, HTTP, DNS, and UPnP via long JSON data for dhcpd udhcpd enable...

CVE-2018-17013

TP-Link TL-WR886N devices (versions 6.0 2.3.4 and 7.0 1.1.0) are affected by a Denial of Service flaw where authenticated attackers can crash router services (inetd, HTTP, DNS, UPnP) by sending long JSON data to the protocol wan wan_rate. The issue arises in the handling of the wan_rate field, ac...

CVE-2018-17010

An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services e.g., inetd, HTTP, DNS, and UPnP via long JSON data for wireless wlanhost2g bandwidth...

CVE-2018-17016

An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services e.g., inetd, HTTP, DNS, and UPnP via long JSON data for reboottimer name...

CVE-2018-17016

The CVE-2018-17016 issue affects the TP-Link TL-WR886N devices (versions 6.0 2.3.4 and 7.0 1.1.0). The vulnerability allows authenticated attackers to crash router services (including inetd, HTTP, DNS, and UPnP) by sending long JSON data targeting the reboot_timer field. The connected sources pro...

CVE-2018-17015

TP-Link TL-WR886N devices (versions 6.0 2.3.4 and 7.0 1.1.0) are affected. Authenticated attackers can cause denial of service by sending long JSON data to ddns phddns username, crashing router services such as inetd, HTTP, DNS, and UPnP. Root cause: malformed/overlong JSON data triggering resour...

CVE-2018-17014

The CVE-2018-17014 issue affects TP-Link TL-WR886N devices in 6.0 2.3.4 and 7.0 1.1.0 revisions. Authenticated attackers can crash router services (inetd, HTTP, DNS, UPnP) by sending excessively long JSON data in the ip_mac_bind field. The connected sources corroborate the same description across...

CVE-2018-17012

The CVE-2018-17012 issue affects TP-Link TL-WR886N devices (firmware versions 6.0 2.3.4 and 7.0 1.1.0). The root cause involves processing of long JSON data for hosts_info set_block_flag up_limit, which can cause authenticated attackers to crash router services such as inetd, HTTP, DNS, and UPnP....

CVE-2018-17009

Affected devices: TP-Link TL-WR886N (versions 6.0 2.3.4 and 7.0 1.1.0). Vulnerability: authenticated attackers can crash router services (inetd, HTTP, DNS, UPnP) by sending long JSON data to the wireless wlan_host_2g isolate. Root cause/impact: abnormal/overlong JSON payload leads to denial of se...

CVE-2018-17008

CVE-2018-17008 affects TP-Link TL-WR886N devices (versions 6.0 2.3.4 and 7.0 1.1.0). Authenticated attackers can crash router services (inetd, HTTP, DNS, UPnP) by sending overly long JSON data targeting wireless wlan_host_2g power. Impact: availability of affected services can be degraded; CVSS d...

CVE-2018-17005

An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services e.g., inetd, HTTP, DNS, and UPnP via long JSON data for firewall dmz enable...

CVE-2018-17018

An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services e.g., inetd, HTTP, DNS, and UPnP via long JSON data for timeswitch name...

CVE-2018-17010

CVE-2018-17010 affects TP-Link TL-WR886N devices (versions 6.0 2.3.4 and 7.0 1.1.0). The issue is triggered by sending long JSON data related to wireless wlan_host_2g bandwidth, which can cause authenticated attackers to crash router services such as inetd, HTTP, DNS, and UPnP. The available docu...

CVE-2018-17009

An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services e.g., inetd, HTTP, DNS, and UPnP via long JSON data for wireless wlanhost2g isolate...

CVE-2018-17015

An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services e.g., inetd, HTTP, DNS, and UPnP via long JSON data for ddns phddns username...

TP-Link File Disclosure Vulnerability

Multiple TP-Link devices are prone to a file disclosure vulnerability where an unauthenticated attacker may obtain the configuration backup file which may contain sensitive data e.g. admin password which could lead to complete compromise of the device. Copyright C 2018 Greenbone Networks GmbH Som...

Rogue Access Point Toolkit : hostapd-mana

hostapd-mana is a featureful rogue wifi access point tool. It can be used for a myriad of purposes from tracking and deanonymising devices aka Snoopy, gathering corporate credentials from devices attempting EAP aka WPE or attracting as many devices as possible to connect to perform MitM attacks...

TP-Link WR840N Buffer Overflow Vulnerability

The TP-Link WR840N is a wireless router product from China P&L TP-LINK. A buffer overflow vulnerability exists in the TP-Link WR840N. An attacker can exploit this vulnerability to cause a denial of service...