TP-LINK WDR4300 - Stored XSS & DoS

Advisory Information =============== Vendors Contacted: TP-LINK Vendor Patched: Yes, Firmware 140916 System Affected: N750 Wireless Dual Band Gigabit Router TL-WDR4300, might affect others. Versions Affected: 130617 , possibly earlier CVE Numbers Assigned: CVE-2014-4727, CVE-2014-4728...

CVE-2014-4728

The CVE-2014-4728 entry concerns the TP-LINK TL-WDR4300 N750 router. Affected component: the device web server. Root cause: handling of a long header in a GET request, enabling remote attackers to cause a denial of service (crash). Impact stated in sources: partial availability impact to the devi...

TP-LINK WDR4300 XSS / Denial Of Service

Advisory Information =============== Vendors Contacted: TP-LINK Vendor Patched: Yes, Firmware 140916 System Affected: N750 Wireless Dual Band Gigabit Router TL-WDR4300, might affect others. Versions Affected: 130617 , possibly earlier CVE Numbers Assigned: CVE-2014-4727, CVE-2014-4728...