TP-LINK WDR4300 - Stored XSS & DoS

Advisory Information =============== Vendors Contacted: TP-LINK Vendor Patched: Yes, Firmware 140916 System Affected: N750 Wireless Dual Band Gigabit Router TL-WDR4300, might affect others. Versions Affected: 130617 , possibly earlier CVE Numbers Assigned: CVE-2014-4727, CVE-2014-4728...

PT-2014-6079

Name of the Vulnerable Software and Affected Versions TP-LINK N750 Wireless Dual Band Gigabit Router TL-WDR4300 versions prior to firmware 140916 Description The issue is related to a cross-site scripting XSS vulnerability in the DHCP clients page. This allows remote attackers to inject arbitrary...

PT-2014-6080

Name of the Vulnerable Software and Affected Versions TP-LINK N750 Wireless Dual Band Gigabit Router TL-WDR4300 versions prior to 140916 Description The issue allows remote attackers to cause a denial of service, resulting in the router crashing, by sending a GET request with a long header...

CVE-2014-4727: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the DHCP clients page in the TP-LINK N750 Wireless Dual Band Gigabit Router TL-WDR4300 with firmware before 140916 allows remote attackers to inject arbitrary web script or HTML via the hostname in a DHCP request...

CVE-2014-4728: Undefined Security Weakness

The web server in the TP-LINK N750 Wireless Dual Band Gigabit Router TL-WDR4300 with firmware before 140916 allows remote attackers to cause a denial of service crash via a long header in a GET request...