CVE-2023-39471

TP-Link TL-WR841N atedtp Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw...

CVE-2023-39471

The CVE-2023-39471 issue affects TP-Link TL-WR841N routers, specifically the ated_tp service. The vulnerability stems from improper validation of a user-supplied string used in a system call, enabling remote code execution. Exploitation is possible by network-adjacent attackers without authentica...

CVE-2022-42433

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR841N TL-WR841NUSV14220121 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

Design/Logic Flaw

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR841N TL-WR841NUSV14220121 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

CVE-2022-42433

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR841N TL-WR841NUSV14220121 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

CVE-2022-42433

Summary: CVE-2022-42433 affects TP-Link TL-WR841N (US V14 220121) via the ated_tp service, where unsafely constructed user input is used in a system call, enabling network-adjacent attackers to execute code with root privileges. The Red Hat and CNNVD records corroborate the same description. The ...