8 matches found
CVE-2024-53375
CVE-2024-53375 TP-Link Archer 系列路由器认证后的操作系统命令注入 受影响设备 使用 HomeShield 功能的 TP-Link 设备容易受到此漏洞利用的影响。这包括 TP-Link Archer 系列的多款路由器。 测试环境 Archer AXE75EUV11.2.2 Build 20240827（发布日期：2024年11月4日） 技术细节 攻击者可以通过 HTTP POST 请求指示路由器执行任意命令。该漏洞可从 /admin/smartnetwork?form=tmpavira 端点调用。需要一个有效会话。 该端点调用 avira.lua...
Tp-Link AX53 v1.0 tmpServer opcode 0x436 stack-based buffer overflow vulnerability
Talos Vulnerability Report TALOS-2025-2302 Tp-Link AX53 v1.0 tmpServer opcode 0x436 stack-based buffer overflow vulnerability May 7, 2026 CVE Number CVE-2026-30814 SUMMARY A stack-based buffer overflow vulnerability exists in the tmpServer opcode 0x436 functionality of Tp-Link AX53 v1.0 1.3.1 Bui...
CVE-2024-53375
An Authenticated Remote Code Execution RCE vulnerability affects the TP-Link Archer router series. A vulnerability exists in the "tmpgetsites" function of the HomeShield functionality provided by TP-Link. This vulnerability is still exploitable without the activation of the HomeShield functionali...
CVE-2024-53375
An Authenticated Remote Code Execution RCE vulnerability affects the TP-Link Archer router series. A vulnerability exists in the "tmpgetsites" function of the HomeShield functionality provided by TP-Link. This vulnerability is still exploitable without the activation of the HomeShield functionali...
CVE-2024-53375
An Authenticated Remote Code Execution RCE vulnerability affects the TP-Link Archer router series. A vulnerability exists in the "tmpgetsites" function of the HomeShield functionality provided by TP-Link. This vulnerability is still exploitable without the activation of the HomeShield functionali...
CVE-2024-53375
An Authenticated Remote Code Execution RCE vulnerability affects the TP-Link Archer router series. A vulnerability exists in the "tmpgetsites" function of the HomeShield functionality provided by TP-Link. This vulnerability is still exploitable without the activation of the HomeShield functionali...
CVE-2024-53375
The TP-Link Archer , Deco , and Tapo series routers are vulnerable to an Authenticated Remote Code Execution (RCE) vulnerability (also described as OS Command Injection ) in the tmp_get_sites function of the HomeShield functionality. The root cause is a lack of input validation where the OwnerId ...
