TP-LINK Archer C50 安全漏洞

TP-LINK Archer C50 is a wireless router from China P&L TP-LINK. A security vulnerability exists in TP-LINK Archer C50 version V2160801. An attacker has exploited the vulnerability to cause a denial of service on the system...

The vulnerability in the strcmp() function of the httpd daemon of the microprogrammed router software for TP-Link Archer C5 version 2 and TP-Link WR710N version 1 allows a hacker to gain unauthorized access to protected information.

The vulnerability of the strcmp function in the httpd daemon of TP-Link Archer C5 version 2 and TP-Link WR710N version 1 is related to the creation of a secondary synchronization channel due to time differences. Exploiting this vulnerability can allow an attacker to gain unauthorized access to...

The vulnerability in the httpd-demon of TP-Link Archer C5 version 2 and TP-Link WR710N version 1 allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the httpd daemon in the microprogramming-based routing software of TP-Link Archer C5 version 2 and TP-Link WR710N version 1 is related to buffer overflows during packet processing. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service...

SRC-2023-0003 : TP-Link Archer AX20/AX21 minidlnad db_dir Remote Code Execution Vulnerability

Vulnerability Details: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer AX20 and AX21 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the misconfiguration of the dbdir...

PT-2023-7515 · Tp Link · Tp-Link Archer Vr1600V

Name of the Vulnerable Software and Affected Versions: TP-Link Archer VR1600V versions = 0.1.0, 0.9.1 v5006.0 Build 220518 Rel.32480n Description: A command injection issue exists in the administrative web portal of TP-Link Archer VR1600V devices. This allows remote attackers, authenticated as...

CVE-2022-4498

In TP-Link routers, Archer C5 and WR710N-V1, running the latest available code, when receiving HTTP Basic Authentication the httpd service can be sent a crafted packet that causes a heap overflow. This can result in either a DoS by crashing the httpd process or an arbitrary code execution...

CVE-2022-4498

In TP-Link routers, Archer C5 and WR710N-V1, running the latest available code, when receiving HTTP Basic Authentication the httpd service can be sent a crafted packet that causes a heap overflow. This can result in either a DoS by crashing the httpd process or an arbitrary code execution...

Heap overflow

In TP-Link routers, Archer C5 and WR710N-V1, running the latest available code, when receiving HTTP Basic Authentication the httpd service can be sent a crafted packet that causes a heap overflow. This can result in either a DoS by crashing the httpd process or an arbitrary code execution...

CVE-2022-4498

CVE-2022-4498 affects TP-Link WR710N-V1-151022 and Archer C5-V2-160201 via the httpd daemon. A crafted HTTP Basic Authentication input can trigger a heap overflow in httpd, yielding either a DoS (crash) or arbitrary code execution on affected devices. Public sources (CERT/CC and NVD entries) corr...

CVE-2022-4499

TP-Link routers, Archer C5 and WR710N-V1, using the latest software, the strcmp function used for checking credentials in httpd, is susceptible to a side-channel attack. By measuring the response time of the httpd process, an attacker could guess each byte of the username and password...

CVE-2022-4499 The strcmp function in TP-Link routers, Archer C5 and WR710N-V1, used for checking credentials in httpd, is susceptible to a side-channel attack.

TP-Link routers, Archer C5 and WR710N-V1, using the latest software, the strcmp function used for checking credentials in httpd, is susceptible to a side-channel attack. By measuring the response time of the httpd process, an attacker could guess each byte of the username and password...

CVE-2022-4499

CVE-2022-4499 affects TP-Link WR710N-V1-151022 and Archer C5-V2-160201 (TP-Link routers). The vulnerability arises from a side-channel attack on the httpd process, specifically a strcmp() used to verify credentials, allowing an attacker to deterministically guess each byte of the username and pas...

TP-Link Archer C5 安全漏洞

The TP-LINK Archer C5 is a wireless router from China P&L TP-LINK. The TP-Link Archer C5 suffers from a security vulnerability that stems from its use of the latest software's strcmp function for checking credentials in httpd, which allows an attacker to measure the response time of the httpd...

PT-2023-2018 · Tp Link · Tp-Link Archer Ax21

Name of the Vulnerable Software and Affected Versions: TP-Link Archer AX21 versions affected versions not specified Description: The issue is caused by a stack-based buffer overflow in the tdpServer service of TP-Link Archer AX21 routers. This allows a remote attacker to execute arbitrary code on...

PT-2023-2019 · Tp Link · Tp-Link Archer Ax21

Name of the Vulnerable Software and Affected Versions: TP-Link Archer AX21 affected versions not specified Description: The issue is caused by a buffer overflow in the tdpServer microprogram of TP-Link Archer AX21 routers. This allows a remote attacker to execute arbitrary code on affected...

The vulnerability of the Client component in TP-Link Archer AX10 microprogramming software allows a attacker to execute a brute-force attack and gain unauthorized access to protected information.

The vulnerability of the Client component in TP-Link Archer AX10 microprogramming software lies in the use of rigidly encrypted login credentials. Exploiting this vulnerability allows a remote attacker to execute a brute-force attack and gain unauthorized access to protected information...

The vulnerability of TP-Link Archer AX10 router’s microprogramming software allows for an attack where the attacker bypasses authentication by using capture-replay techniques to intercept and replay captured parameters. This enables the attacker to carry out a “man-in-the-middle” type attack and gain unauthorized access to protected information.

The vulnerability of TP-Link Archer AX10 router’s microprogramming software lies in the ability to bypass the authentication process by exploiting the capture-replay technique for manipulating processed HTTP packets. Exploiting this vulnerability allows an attacker to carry out a...

EMC RSA Archer 6.0 < 6.9 SP3 P4 / 6.10 < 6.10 P2 Remote Code Execution

The version of EMC RSA Archer running on the remote web server is 6.x prior to 6.9.3.4 6.9 SP3 P4, 6.10.x prior to 6.10.0.2 6.10 P2. It is, therefore, affected by a remote code execution vulnerability due to unrestricted upload of a file with a dangerous type. A remote, authenticated malicious us...

PT-2022-6525 · Tp Link · Tp-Link Archer Ax21

Name of the Vulnerable Software and Affected Versions: TP-Link Archer AX21 AX1800 affected versions not specified Description: The issue is related to a buffer overflow vulnerability in the TP-Link AX1800 router's firmware, allowing remote attackers to execute arbitrary code on affected...

PT-2022-6284 · Tp Link · Tp-Link Archer C5 +1

Name of the Vulnerable Software and Affected Versions: TP-Link Archer C5 version 2 TP-Link WR710N version 1 Description: The issue is related to the strcmp function used for checking credentials in the httpd process of TP-Link routers. This function is susceptible to a side-channel attack, where ...