Lucene search
+L

1963 matches found

Cvelist
Cvelist
added 2024/12/05 12:19 p.m.18 views

CVE-2024-54127 Exposure of Wi-Fi Credentials in Plaintext in TP-Link Archer C50

This vulnerability exists in the TP-Link Archer C50 due to presence of terminal access on a serial interface without proper access control. An attacker with physical access could exploit this by accessing the UART shell on the vulnerable device. Successful exploitation of this vulnerability could...

4.2CVSS0.00153EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/05 12:19 p.m.11 views

CVE-2024-54127 Exposure of Wi-Fi Credentials in Plaintext in TP-Link Archer C50

This vulnerability exists in the TP-Link Archer C50 due to presence of terminal access on a serial interface without proper access control. An attacker with physical access could exploit this by accessing the UART shell on the vulnerable device. Successful exploitation of this vulnerability could...

4.2CVSS6.5AI score0.00153EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/05 12:19 p.m.59 views

CVE-2024-54127

CVE-2024-54127 concerns TP-Link Archer C50. The issue arises from terminal access on the device’s serial interface without proper access control, allowing a physically present attacker to access the UART shell and potentially obtain Wi‑Fi credentials. Connected sources corroborate that the vulner...

4.2CVSS6.1AI score0.00153EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/05 12:14 p.m.3351 views

CVE-2024-54126

CVE-2024-54126 affects the TP-Link Archer C50. The root cause is an improper signature verification in the firmware upgrade process via the web interface. An attacker with administrative privileges within the router’s Wi‑Fi range can upload and execute malicious firmware, potentially resulting in...

8.5CVSS6.6AI score0.0014EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/05 12:14 p.m.11 views

CVE-2024-54126 Insufficient Integrity Verification Vulnerability in TP-Link Archer C50

This vulnerability exists in the TP-Link Archer C50 due to improper signature verification mechanism in the firmware upgrade process at its web interface. An attacker with administrative privileges within the router’s Wi-Fi range could exploit this vulnerability by uploading and executing malicio...

8.5CVSS6.9AI score0.0014EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/05 12:14 p.m.21 views

CVE-2024-54126 Insufficient Integrity Verification Vulnerability in TP-Link Archer C50

This vulnerability exists in the TP-Link Archer C50 due to improper signature verification mechanism in the firmware upgrade process at its web interface. An attacker with administrative privileges within the router’s Wi-Fi range could exploit this vulnerability by uploading and executing malicio...

8.5CVSS0.0014EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/05 12:0 a.m.6 views

TP-Link Archer C50 安全漏洞

TP-LINK Archer C50 is a wireless router from China P&L TP-LINK. A security vulnerability exists in TP-Link Archer C50 versions prior to V4 240917, which stems from an incorrect signature verification mechanism during the firmware upgrade process in the web interface, resulting in a fully...

8.5CVSS6.7AI score0.0014EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/05 12:0 a.m.13 views

PT-2024-9342 · Tp Link · Tp-Link Archer C50

Name of the Vulnerable Software and Affected Versions: TP-Link Archer C50 affected versions not specified Description: The issue is related to the improper signature verification mechanism in the firmware upgrade process at the web interface of the TP-Link Archer C50. This allows an attacker with...

8.5CVSS7.8AI score0.0014EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2024/12/05 12:0 a.m.9 views

PT-2024-9343 · Tp Link · Tp-Link Archer C50

Name of the Vulnerable Software and Affected Versions: TP-Link Archer C50 affected versions not specified Description: The issue is related to the storage of critical information in an unencrypted manner in the web interface of the TP-Link Archer C50 Wi-Fi router. This could allow an attacker to...

4.2CVSS6.8AI score0.00153EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2024/12/05 12:0 a.m.7 views

TP-Link Archer C50 安全漏洞

The TP-LINK Archer C50 is a wireless router from China P&L TP-LINK. A security vulnerability exists in the TP-Link Archer C50 prior to version V4 240917, which stems from terminal access on the serial interface that is not properly privileged, allowing an attacker to obtain Wi-Fi credentials on t...

4.2CVSS6.6AI score0.00153EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/12/05 12:0 a.m.8 views

The vulnerability of the tmp_get_sites function in TP-Link Archer Series, TP-Link Deco Series, and TP-Link Tapo Series routers allows a hacker to execute arbitrary commands.

The vulnerability of the tmpgetsites function in TP-Link Archer Series, TP-Link Deco Series, and TP-Link Tapo Series routers lies in the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

8CVSS8.1AI score0.40679EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2024/12/05 12:0 a.m.8 views

The vulnerability of TP-Link Archer C7 Wi-Fi routers’ microprogramming software lies in the absence of authentication for a critical function, allowing attackers to gain unauthorized access to protected information.

The vulnerability of TP-Link Archer C7 Wi-Fi routers’ microprogramming software is related to the absence of authentication for a critical function during the loading of the l00.xml page. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to...

7.8CVSS5.5AI score0.00388EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/12/02 12:0 a.m.8 views

TP-Link Archer 安全漏洞

TP-LINK Archer is a series of routers from China's Universal Link TP-LINK. A security vulnerability exists in TP-Link Archer that stems from the presence of a certified Remote Code Execution RCE vulnerability...

8CVSS8.2AI score0.40679EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/12/02 12:0 a.m.58 views

CVE-2024-53375

An Authenticated Remote Code Execution RCE vulnerability affects the TP-Link Archer router series. A vulnerability exists in the "tmpgetsites" function of the HomeShield functionality provided by TP-Link. This vulnerability is still exploitable without the activation of the HomeShield functionali...

8.1AI score0.40679EPSS
SaveExploits1References2
NVD
NVD
added 2024/11/29 11:15 p.m.23 views

CVE-2024-53623

Incorrect access control in the component l00.xml of TP-Link ARCHER-C7 v5 allows attackers to access sensitive information...

7.5CVSS0.00388EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/29 12:0 a.m.14 views

CVE-2024-53623

Incorrect access control in the component l00.xml of TP-Link ARCHER-C7 v5 allows attackers to access sensitive information...

7.5AI score0.00388EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/29 12:0 a.m.60 views

CVE-2024-53623

The CVE-2024-53623 issue affects TP-Link ARCHER-C7 router (v5), arising from an access control flaw in the l_0_0.xml component that may allow an attacker to access sensitive information. Reports from PT-2024-9088 confirm v5 as affected and describe a remote access risk. Remediation elements prese...

7.5CVSS6.5AI score0.00388EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/29 12:0 a.m.4 views

TP-LINK Archer C7 安全漏洞

The TP-LINK Archer C7 is a wireless router from China P&L TP-LINK. An Access Control Error vulnerability exists in TP-LINK Archer C7 v5, which originates from a faulty access control in component l00.xml, and can be exploited by an attacker to access sensitive information...

7.5CVSS6.7AI score0.00388EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/29 12:0 a.m.25 views

CVE-2024-53623

Incorrect access control in the component l00.xml of TP-Link ARCHER-C7 v5 allows attackers to access sensitive information...

0.00388EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/11/20 12:0 a.m.16 views

PT-2024-9110

Name of the Vulnerable Software and Affected Versions TP-Link Archer Series routers TP-Link Deco Series routers TP-Link Tapo Series routers Description An authenticated Remote Code Execution RCE issue exists in the tmp get sites function of the HomeShield functionality provided by TP-Link. This...

8CVSS8.2AI score0.40679EPSS
SaveExploits1References21
Rows per page
Query Builder