EUVD-2019-4775

Malware in sbrugna...

TP-Link Archer C3200 and Archer C2 Input Validation Error Vulnerability (CNVD-2019-31310)

The TP-Link Archer C3200 and Archer C2 are both a wireless router from China's P&L TP-Link. An input validation error vulnerability exists in the TP-Link Archer C3200 and Archer C2, which can be exploited by an attacker to transfer data between two isolated network segments on the same device...

TP-Link Archer C3200 and Archer C2 Input Validation Error Vulnerability (CNVD-2019-31311)

The TP-Link Archer C3200 and Archer C2 are both a wireless router from China's P&L TP-Link. An input validation error vulnerability exists in the TP-Link Archer C3200 and Archer C2, which can be exploited by an attacker to transfer data between two isolated network segments on the same device...

TP-Link Archer C3200 and Archer C2 Input Validation Error Vulnerability

The TP-Link Archer C3200 and Archer C2 are both a wireless router from China's P&L TP-Link. An input validation error vulnerability exists in the TP-Link Archer C3200 and Archer C2, which can be exploited by an attacker to transfer data between two isolated network segments on the same device...

CVE-2019-13266

TP-Link Archer C3200 V1 and Archer C2 V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. A DHCP Request is sent to the router with a certain Transaction ID field. Following the DHCP protocol, the router responds wi...

CVE-2019-13267

TP-Link Archer C3200 V1 and Archer C2 V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. In order to transfer data from the host network to the guest network, the sender joins and then leaves an IGMP group. After i...

Design/Logic Flaw

TP-Link Archer C3200 V1 and Archer C2 V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. A DHCP Request is sent to the router with a certain Transaction ID field. Following the DHCP protocol, the router responds wi...

CVE-2019-13266

TP-Link Archer C3200 V1 and Archer C2 V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. A DHCP Request is sent to the router with a certain Transaction ID field. Following the DHCP protocol, the router responds wi...

CVE-2019-13266

CVE-2019-13266 describes an insufficient compartmentalization vulnerability on TP-Link Archer C3200 V1 and Archer C2 V1 routers. The issue arises when a DHCP request’s 32-bit Transaction ID is reused across Host and Guest networks, causing the router to respond with a NAK to both networks and ena...

CVE-2019-13267

TP-Link Archer C3200 V1 and Archer C2 V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. In order to transfer data from the host network to the guest network, the sender joins and then leaves an IGMP group. After i...

CVE-2019-13267

The CVE-2019-13267 entry concerns TP-Link Archer C3200 V1 and Archer C2 V1 routers with insufficient isolation between host and guest networks on the same device. The root cause is a mechanism where, during IGMP group joins/leaves, the router creates an IGMP Membership Query using the Group IP, s...

CVE-2004-2166

CVE-2004-2166 affects Canon ImageRUNNER (iR) 5000i and C3200 printers, where the print-from-email feature can be abused when IP range filtering is not used. A remote attacker can send a text/plain email to TCP port 25 and cause the device to print arbitrary text without authentication. The issue ...