PT-2023-9172

Name of the Vulnerable Software and Affected Versions TP-Link Omada ER605 affected versions not specified Description The issue is related to the use of weak protection mechanisms in the cmxddnsd executable of the TP-Link Omada ER605 router's firmware. This allows a remote attacker to execute...

PT-2023-9174

Name of the Vulnerable Software and Affected Versions TP-Link Omada ER605 affected versions not specified Description The TP-Link Omada ER605 contains a stack-based buffer overflow flaw. This allows network-adjacent attackers to execute arbitrary code on affected devices. Authentication is not...

The vulnerability of the application software interface of TP-Link Omada SDN software controllers, related to errors in processing authentication requests, allows a intruder to gain access to the protected network.

The vulnerability of the application software interface of TP-Link Omada SDN software controllers is related to errors in processing authentication requests. Exploiting this vulnerability can allow a remote attacker to gain access to the protected network...

TP-Link Omada Controller Software Licensing Issue Vulnerability

TP-Link Omada Controller Software is a set of software from Tp-link that supports the management of wireless access points.TP-Link Omada Controller Software versions prior to 5.0.15 are vulnerable to authorization issues, which stem from a lack of authentication measures or insufficient...

CVE-2021-44032

TP-Link Omada SDN Software Controller before 5.0.15 does not check if the authentication method specified in a connection request is allowed. An attacker can bypass the captive portal authentication process by using the downgraded "no authentication" method, and access the protected network. For...

CVE-2021-44032

TP-Link Omada SDN Software Controller before 5.0.15 does not check if the authentication method specified in a connection request is allowed. An attacker can bypass the captive portal authentication process by using the downgraded "no authentication" method, and access the protected network. For...

CVE-2021-44032

TP-Link Omada SDN Software Controller before 5.0.15 does not check if the authentication method specified in a connection request is allowed. An attacker can bypass the captive portal authentication process by using the downgraded "no authentication" method, and access the protected network. For...

Authentication flaw

TP-Link Omada SDN Software Controller before 5.0.15 does not check if the authentication method specified in a connection request is allowed. An attacker can bypass the captive portal authentication process by using the downgraded "no authentication" method, and access the protected network. For...

TP-LINK Omada Controller Software 安全漏洞

TP-Link Omada Controller Software is a set of software from Tp-link that supports the management of wireless access points.TP-Link Omada Controller Software versions prior to 5.0.15 are vulnerable to authorization issues, which stem from a lack of authentication measures or insufficient...

CVE-2021-44032

TP-Link Omada SDN Software Controller before 5.0.15 does not check if the authentication method specified in a connection request is allowed. An attacker can bypass the captive portal authentication process by using the downgraded "no authentication" method, and access the protected network. For...

CVE-2021-44032

The vulnerability CVE-2021-44032 affects TP-Link Omada SDN Software Controller prior to version 5.0.15. The root cause is that the controller does not validate whether the requested authentication method is allowed, enabling an attacker to bypass captive portal authentication by downgrading to a ...

TP-Link Omada Controller Software Path Traversal Vulnerability

TP-Link Omada Controller Software is a suite of software from China P&L TP-Link that supports the management of wireless access points. A path traversal vulnerability exists in TP-Link Omada Controller Software version 3.2.6. An attacker can exploit this vulnerability to read arbitrary files with...

CVE-2020-12475

TP-Link Omada Controller Software 3.2.6 allows Directory Traversal for reading arbitrary files via com.tplink.eap.web.portal.PortalController.getAdvertiseFile in /opt/tplink/EAPController/lib/eap-web-3.2.6.jar...

CVE-2020-12475

TP-Link Omada Controller Software 3.2.6 allows Directory Traversal for reading arbitrary files via com.tplink.eap.web.portal.PortalController.getAdvertiseFile in /opt/tplink/EAPController/lib/eap-web-3.2.6.jar...

Directory traversal

TP-Link Omada Controller Software 3.2.6 allows Directory Traversal for reading arbitrary files via com.tplink.eap.web.portal.PortalController.getAdvertiseFile in /opt/tplink/EAPController/lib/eap-web-3.2.6.jar...

CVE-2020-12475

The connected sources confirm a concrete vulnerability in TP-Link Omada Controller Software 3.2.6: a directory traversal flaw in com.tp_link.eap.web.portal.PortalController.getAdvertiseFile within /opt/tplink/EAPController/lib/eap-web-3.2.6.jar allows reading arbitrary files. This is a local atta...

CVE-2020-12475

TP-Link Omada Controller Software 3.2.6 allows Directory Traversal for reading arbitrary files via com.tplink.eap.web.portal.PortalController.getAdvertiseFile in /opt/tplink/EAPController/lib/eap-web-3.2.6.jar...

TP-Link EAP Controller and Omada Controller Hardcoding Vulnerability

TP-Link EAP Controller and Omada Controller are both software from China P&L TP-LINK for remote control of wireless AP access point devices. A security vulnerability exists in the Web application backup file in TP-Link EAP Controller and Omada Controller versions 2.5.4Windows and 2.6.0Windows,...

TP-Link EAP Controller and Omada Controller Cross-Site Request Forgery Vulnerability

TP-Link EAP Controller and Omada Controller are both software from China P&L TP-LINK for remote control of wireless AP access point devices. A security vulnerability exists in the Web management interface in TP-Link EAP Controller and Omada Controller versions 2.5.4Windows and 2.6.0Windows, which...

TP-Link EAP Controller and Omada Controller Elevation of Privilege Vulnerability

TP-Link EAP Controller and Omada Controller are both software from China P&L TP-LINK for remote control of wireless AP access point devices. A security vulnerability exists in TP-Link EAP Controller and Omada Controller versions 2.5.4Windows and 2.6.0Windows, which originates from the program's...