Lucene search
+L

86 matches found

EUVD
EUVD
added 2025/08/29 5:30 p.m.11 views

EUVD-2025-26234

The authenticated remote command execution RCE vulnerability exists in the Parental Control page on TP-Link Archer C7EU V2 and TL-WR841N/NDMS V9. This issue affects Archer C7EU V2: before 241108 and TL-WR841N/NDMS V9: before 241108. Both products have reached the status of EOL end-of-life. It's...

8.6CVSS6.6AI score0.11788EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/08/29 5:30 p.m.3 views

CVE-2025-9377 Authenticated RCE via Parental Control command injection

The authenticated remote command execution RCE vulnerability exists in the Parental Control page on TP-Link Archer C7EU V2 and TL-WR841N/NDMS V9. This issue affects Archer C7EU V2: before 241108 and TL-WR841N/NDMS V9: before 241108. Both products have reached the status of EOL end-of-life. It's...

8.6CVSS6.7AI score0.11788EPSS
SaveExploits0References2
CVE
CVE
added 2025/08/29 5:30 p.m.106 views

CVE-2025-9377

CVE-2025-9377 is an OS command injection (authenticated RCE) vulnerability on TP-Link Archer C7(EU) V2 and TL-WR841N/ND(MS) V9 in the Parental Control page, affecting versions before 241108. The issues are tied to end-of-life devices; TP-Link released patches and recommended upgrading where possi...

8.6CVSS6.7AI score0.11788EPSS
SaveIn wildExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2025/08/29 12:0 a.m.8 views

PT-2025-35298

Name of the Vulnerable Software and Affected Versions TP-Link Archer C7EU V2 versions prior to 241108 TP-Link TL-WR841N/NDMS V9 versions prior to 241108 Description An authenticated remote command execution RCE vulnerability exists in the Parental Control page on TP-Link Archer C7EU V2 and...

9CVSS7.4AI score0.11788EPSS
SaveExploits0References52
VulnCheck KEV
VulnCheck KEV
added 2025/08/29 12:0 a.m.5 views

VulnCheck KEV: CVE-2025-9377

The authenticated remote command execution RCE vulnerability exists in the Parental Control page on TP-Link Archer C7EU V2 and TL-WR841N/NDMS V9. This issue affects Archer C7EU V2: before 241108 and TL-WR841N/NDMS V9: before 241108. Both products have reached the status of EOL end-of-life. It's...

8.6CVSS6AI score0.1745EPSS
SaveIn wildExploits0References7
CNNVD
CNNVD
added 2025/08/29 12:0 a.m.8 views

TP-LINK多款产品 安全漏洞

TP-LINK TL-WR841ND and so on are products of China P&L TP-LINK company.TP-LINK TL-WR841ND is a wireless router.TP-Link Archer C7 and so on are products of China P&L TP-Link company.TP-Link Archer C7 is a router.TP- Link TL-WR841N is a router. A security vulnerability exists in a number of TP-LINK...

8.6CVSS6.9AI score0.11788EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/05/23 7:16 a.m.9 views

CVE-2024-53623

Incorrect access control in the component l00.xml of TP-Link ARCHER-C7 v5 allows attackers to access sensitive information...

7.5CVSS6.8AI score0.00388EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 4:10 a.m.12 views

CVE-2023-39224

Archer C5 firmware all versions and Archer C7 firmware versions prior to 'Archer C7JPV2230602' allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Note that Archer C5 is no longer supported, therefore the update for this product is not provided...

8CVSS7.5AI score0.0035EPSS
SaveExploits0
CNVD
CNVD
added 2024/12/06 12:0 a.m.8 views

TP-LINK Archer C7 Access Control Error Vulnerability

The TP-LINK Archer C7 is a wireless router from China P&L TP-LINK. An Access Control Error vulnerability exists in TP-LINK Archer C7 v5, which originates from a faulty access control in component l00.xml, and can be exploited by an attacker to access sensitive information...

7.5CVSS6.6AI score0.00388EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/12/05 12:0 a.m.8 views

The vulnerability of TP-Link Archer C7 Wi-Fi routers’ microprogramming software lies in the absence of authentication for a critical function, allowing attackers to gain unauthorized access to protected information.

The vulnerability of TP-Link Archer C7 Wi-Fi routers’ microprogramming software is related to the absence of authentication for a critical function during the loading of the l00.xml page. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to...

7.8CVSS5.5AI score0.00388EPSS
SaveExploits0References4
NVD
NVD
added 2024/11/29 11:15 p.m.24 views

CVE-2024-53623

Incorrect access control in the component l00.xml of TP-Link ARCHER-C7 v5 allows attackers to access sensitive information...

7.5CVSS0.00388EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/29 12:0 a.m.28 views

CVE-2024-53623

Incorrect access control in the component l00.xml of TP-Link ARCHER-C7 v5 allows attackers to access sensitive information...

0.00388EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/29 12:0 a.m.62 views

CVE-2024-53623

The CVE-2024-53623 issue affects TP-Link ARCHER-C7 router (v5), arising from an access control flaw in the l_0_0.xml component that may allow an attacker to access sensitive information. Reports from PT-2024-9088 confirm v5 as affected and describe a remote access risk. Remediation elements prese...

7.5CVSS6.5AI score0.00388EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/29 12:0 a.m.14 views

CVE-2024-53623

Incorrect access control in the component l00.xml of TP-Link ARCHER-C7 v5 allows attackers to access sensitive information...

7.5AI score0.00388EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/29 12:0 a.m.5 views

TP-LINK Archer C7 安全漏洞

The TP-LINK Archer C7 is a wireless router from China P&L TP-LINK. An Access Control Error vulnerability exists in TP-LINK Archer C7 v5, which originates from a faulty access control in component l00.xml, and can be exploited by an attacker to access sensitive information...

7.5CVSS6.7AI score0.00388EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/11/13 12:0 a.m.9 views

PT-2024-9088 · Tp Link · Tp-Link Archer C7

Name of the Vulnerable Software and Affected Versions: TP-Link ARCHER-C7 version v5 Description: The issue is related to incorrect access control in the l 0 0.xml component, which allows attackers to access sensitive information. This can be exploited by a remote attacker to gain unauthorized...

7.8CVSS7.6AI score0.00388EPSS
SaveExploits0References10
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.164 views

Archer C7 Directory Traversal

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Archer C7 Directory Traversal Vulnerability', 'Description' = %q This module exploits a directory traversal vulnerability in the PATHINFO found a...

7.8CVSS7AI score0.83667EPSS
SaveExploits5
NVD
NVD
added 2023/09/06 10:15 a.m.19 views

CVE-2023-39224

Archer C5 firmware all versions and Archer C7 firmware versions prior to 'Archer C7JPV2230602' allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Note that Archer C5 is no longer supported, therefore the update for this product is not provided...

8CVSS8AI score0.0035EPSS
SaveExploits0References2
OSV
OSV
added 2023/09/06 10:15 a.m.7 views

CVE-2023-39224

Archer C5 firmware all versions and Archer C7 firmware versions prior to 'Archer C7JPV2230602' allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Note that Archer C5 is no longer supported, therefore the update for this product is not provided...

8CVSS6AI score0.0035EPSS
SaveExploits0References2
Prion
Prion
added 2023/09/06 10:15 a.m.21 views

Design/Logic Flaw

Archer C5 firmware all versions and Archer C7 firmware versions prior to 'Archer C7JPV2230602' allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Note that Archer C5 is no longer supported, therefore the update for this product is not provided...

5.2CVSS8AI score0.0035EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder