PT-2019-3095

Name of the Vulnerable Software and Affected Versions TP-Link Archer C3200 version 1 TP-Link Archer C2 version 1 Description The issue is related to insufficient compartmentalization between a host network and a guest network established by the same device. It involves the DHCP protocol, where a...

CVE-2019-13266: Incorrect Resource Transfer Between Spheres

TP-Link Archer C3200 V1 and Archer C2 V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. A DHCP Request is sent to the router with a certain Transaction ID field. Following the DHCP protocol, the router responds wi...

CVE-2019-13267: Undefined Security Weakness

TP-Link Archer C3200 V1 and Archer C2 V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. In order to transfer data from the host network to the guest network, the sender joins and then leaves an IGMP group. After i...

CVE-2019-13268: Improper Input Validation

TP-Link Archer C3200 V1 and Archer C2 V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. They forward ARP requests, which are sent as broadcast packets, between the host and the guest networks. To use this leakage ...

PT-2019-3094

Name of the Vulnerable Software and Affected Versions TP-Link Archer C3200 version 1 TP-Link Archer C2 version 1 Description The issue is related to insufficient compartmentalization between a host network and a guest network established by the same device. An attacker can exploit this by joining...

TP-Link Archer C1200 Buffer Overflow Vulnerability

The TP-Link Archer C1200 is a wireless router from China P&L TP-Link. A buffer overflow vulnerability exists in the CMDSETCONFIGCOUNTRY of the TP-Link Device Debug protocol in TP-Link Archer C1200 1.0.0 Build 20180502 rel.45702 and prior versions. The vulnerability originates when a network syste...

CVE-2019-13614

CMDSETCONFIGCOUNTRY in the TP-Link Device Debug protocol in TP-Link Archer C1200 1.0.0 Build 20180502 rel.45702 and earlier is prone to a stack-based buffer overflow, which allows a remote attacker to achieve code execution or denial of service by sending a crafted payload to the listening server...

CVE-2019-13614

CMDSETCONFIGCOUNTRY in the TP-Link Device Debug protocol in TP-Link Archer C1200 1.0.0 Build 20180502 rel.45702 and earlier is prone to a stack-based buffer overflow, which allows a remote attacker to achieve code execution or denial of service by sending a crafted payload to the listening server...

Stack overflow

CMDSETCONFIGCOUNTRY in the TP-Link Device Debug protocol in TP-Link Archer C1200 1.0.0 Build 20180502 rel.45702 and earlier is prone to a stack-based buffer overflow, which allows a remote attacker to achieve code execution or denial of service by sending a crafted payload to the listening server...

CVE-2019-13613

CMDFTESTCONFIG in the TP-Link Device Debug protocol in TP-Link Wireless Router Archer Router version 1.0.0 Build 20180502 rel.45702 EU and earlier is prone to a stack-based buffer overflow, which allows a remote attacker to achieve code execution or denial of service by sending a crafted payload ...

CVE-2019-13614

Summary: CVE-2019-13614 affects the TP-Link Archer C1200 router (firmware 1.0.0 Build 20180502 rel.45702 and earlier). The bug resides in the TP-Link Device Debug protocol’s CMD_SET_CONFIG_COUNTRY handler, where a stack-based buffer overflow can be triggered by crafted input. This vulnerability c...

CVE-2019-13613

CMDFTESTCONFIG in the TP-Link Device Debug protocol in TP-Link Wireless Router Archer Router version 1.0.0 Build 20180502 rel.45702 EU and earlier is prone to a stack-based buffer overflow, which allows a remote attacker to achieve code execution or denial of service by sending a crafted payload ...

CVE-2019-13613

Technical details about CVE-2019-13613 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories.

PT-2019-13448

Name of the Vulnerable Software and Affected Versions TP-Link Wireless Router Archer Router version 1.0.0 Build 20180502 rel.45702 EU and earlier Description The issue is related to a stack-based buffer overflow in the CMD FTEST CONFIG of the TP-Link Device Debug protocol. This allows a remote...

CVE-2019-13613: Out-of-bounds Write

CMDFTESTCONFIG in the TP-Link Device Debug protocol in TP-Link Wireless Router Archer Router version 1.0.0 Build 20180502 rel.45702 EU and earlier is prone to a stack-based buffer overflow, which allows a remote attacker to achieve code execution or denial of service by sending a crafted payload ...

PT-2019-13449

Name of the Vulnerable Software and Affected Versions TP-Link Archer C1200 versions 1.0.0 Build 20180502 rel.45702 and earlier Description The issue is related to a stack-based buffer overflow in the TP-Link Device Debug protocol, specifically with the CMD SET CONFIG COUNTRY command. This allows ...

CVE-2019-13614: Out-of-bounds Write

CMDSETCONFIGCOUNTRY in the TP-Link Device Debug protocol in TP-Link Archer C1200 1.0.0 Build 20180502 rel.45702 and earlier is prone to a stack-based buffer overflow, which allows a remote attacker to achieve code execution or denial of service by sending a crafted payload to the listening server...

CVE-2016-10719

TP-Link Archer CR-700 1.0.6 devices have an XSS vulnerability that can be introduced into the admin account through a DHCP request, allowing the attacker to steal the cookie information, which contains the base64 encoded username and password...

Cross site scripting

TP-Link Archer CR-700 1.0.6 devices have an XSS vulnerability that can be introduced into the admin account through a DHCP request, allowing the attacker to steal the cookie information, which contains the base64 encoded username and password...

CVE-2016-10719

TP-Link Archer CR-700 1.0.6 devices have an XSS vulnerability that can be introduced into the admin account through a DHCP request, allowing the attacker to steal the cookie information, which contains the base64 encoded username and password...