TP-LINK WDR4300 - Stored XSS & DoS

Advisory Information =============== Vendors Contacted: TP-LINK Vendor Patched: Yes, Firmware 140916 System Affected: N750 Wireless Dual Band Gigabit Router TL-WDR4300, might affect others. Versions Affected: 130617 , possibly earlier CVE Numbers Assigned: CVE-2014-4727, CVE-2014-4728...

CVE-2014-4727

CVE-2014-4727 affects TP-LINK TL-WDR4300 (N750) routers. The vulnerability is a stored XSS in the DHCP clients page, exploitable via the hostname field in a DHCP request. If an administrator visits the affected web panel, injected script can execute in the browser. A DoS condition on the device w...

TP-LINK WDR4300 XSS / Denial Of Service

Advisory Information =============== Vendors Contacted: TP-LINK Vendor Patched: Yes, Firmware 140916 System Affected: N750 Wireless Dual Band Gigabit Router TL-WDR4300, might affect others. Versions Affected: 130617 , possibly earlier CVE Numbers Assigned: CVE-2014-4727, CVE-2014-4728...