PT-2023-2937 · Tp Link · Tp-Link Archer C7

Name of the Vulnerable Software and Affected Versions: TP-Link Archer C7v2 version v2 en us 180114 Description: A vulnerability has been found in the component GET Request Parameter Handler, which can lead to denial of service when exploited. The attack can only be done within the local network...

Alert: Active Exploitation of TP-Link, Apache, and Oracle Vulnerabilities Detected

The U.S. Cybersecurity and Infrastructure Security Agency CISA has added three flaws to the Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The security vulnerabilities are as follows - CVE-2023-1389 CVSS score: 8.8 - TP-Link Archer AX-21 Command Injection...

CVE-2023-30639

Archer Platform 6.8 before 6.12 P6 HF1 6.12.0.6.1 contains a stored XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. 6.11.P4 6.11.0.4 is also a fixed release...

CVE-2023-30639

Archer Platform 6.8 before 6.12 P6 HF1 6.12.0.6.1 contains a stored XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. 6.11.P4 6.11.0.4 is also a fixed release...

Cross site scripting

Archer Platform 6.8 before 6.12 P6 HF1 6.12.0.6.1 contains a stored XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. 6.11.P4 6.11.0.4 is also a fixed release...

PT-2023-22832 · Rsa · Archer Platform

Name of the Vulnerable Software and Affected Versions: Archer Platform versions 6.8 through 6.12 P6 before HF1 6.12.0.6.1 Description: The issue allows a remote authenticated malicious user to potentially exploit a stored XSS vulnerability, storing malicious HTML or JavaScript code in a trusted...

CVE-2023-30639

Archer Platform is affected by a stored XSS vulnerability (CVE-2023-30639) in versions 6.8 through 6.12 P6 before HF1 (6.12.0.6.1). A remote authenticated Archer user could store malicious HTML/JavaScript in a trusted data store, which would be executed by other users’ browsers in the context of ...

TP-Link Archer AX-21 Command Injection Vulnerability

TP-Link Archer AX-21 contains a command injection vulnerability that allows for remote code execution...

Archer Platform 跨站脚本漏洞

Archer Platform is a modern integrated risk management solution from Archer, Inc. A security vulnerability exists in Archer Platform versions prior to 6.12.0.6.1, which stems from the presence of a stored cross-site scripting XSS vulnerability that could allow an authenticated, remote attacker to...

CVE-2023-30639

Archer Platform 6.8 before 6.12 P6 HF1 6.12.0.6.1 contains a stored XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. 6.11.P4 6.11.0.4 is also a fixed release...

CVE-2023-30639

Archer Platform 6.8 before 6.12 P6 HF1 6.12.0.6.1 contains a stored XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. 6.11.P4 6.11.0.4 is also a fixed release...

PT-2023-3300 · Tp Link · Tp-Link Archer Ax21

Name of the Vulnerable Software and Affected Versions: TP-Link Archer AX21 AX1800 versions affected versions not specified Description: This issue allows remote attackers to gain access to LAN-side services on affected installations of TP-Link Archer AX21 routers. Authentication is not required t...

(Pwn2Own) TP-Link Archer AX21 merge_country_config Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer AX21 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the mergecountryconfig function. The issue results from the lack o...

(Pwn2Own) TP-Link AX1800 hotplugd Firewall Rule Race Condition Vulnerability

This vulnerability allows remote attackers to gain access to LAN-side services on affected installations of TP-Link Archer AX21 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the hotplugd daemon. The issue results from firewall rule handling...

The vulnerability of the MiniDLNA service in the TPDLNA/files.db file of TP-Link Archer AX20 (AX1800) routers allows a hacker to execute arbitrary code.

The vulnerability of the MiniDLNA service in the TPDLNA/files.db file on TP-Link Archer AX20 AX1800 routers is caused by a buffer overflow in the stack. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

The vulnerability of TP-Link Archer AX21 (AX1800)’s microprogramming software allows a remote attacker to execute arbitrary code.

The vulnerability of TP-Link Archer AX21 AX1800 microprogramming software lies in reading data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

VulnCheck KEV: CVE-2023-1389

TP-Link Archer AX-21 contains a command injection vulnerability that allows for remote code execution...

PT-2023-5279 · Tp Link · Tp-Link Archer C2 +2

Name of the Vulnerable Software and Affected Versions: TP-Link Archer C50 version Archer C50US V2 160801 TP-Link Archer C20 version Archer C20 V1 150707 TP-Link Archer C2 version Archer C2 US V1 170228 Description: The issue is related to a buffer overflow in the Wi-Fi router's firmware when...

The vulnerability in the web interface for managing TP-Link Archer AX21 (AX1800 routers allows a hacker to execute arbitrary commands with root privileges.

The vulnerability in the web interface for managing TP-Link Archer AX21 AX1800 routers is related to the lack of measures taken to clean data at the management level when processing a symbolic link /cgi-bin/luci/stok=/locale. Exploiting this vulnerability allows an attacker to execute arbitrary...

The vulnerability of the tdpServer software service of TP-Link Archer AX21 allows a hacker to execute arbitrary code.

The vulnerability of the tdpServer microprogramming software for TP-Link Archer AX21 is caused by a buffer overflow on the stack. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...