TP-Link Archer AX21 tdpServer Logging Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer AX21 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the logging functionality of the tdpServer program, which listens ...

tpLink RE300 Wireless DoS

The vulnerability of the tdpServer microprogramming system in TP-Link RE300 wireless signal amplifiers is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a hacker to cause malfunctions in the device’s functionality...

CVE-2022-41783

tdpServer of TP-Link RE300 V1 improperly processes its input, which may allow an attacker to cause a denial-of-service DoS condition of the product's OneMesh function...

CVE-2022-41783: Undefined Security Weakness

tdpServer of TP-Link RE300 V1 improperly processes its input, which may allow an attacker to cause a denial-of-service DoS condition of the product's OneMesh function...

CVE-2022-41783

TP-Link RE300 V1 is affected by CVE-2022-41783 due to improper processing of input by the tdpServer, which may allow an attacker to trigger a denial-of-service (DoS) in the OneMesh function. Connected sources identify the affected component as tdpServer and confirm DoS as the primary impact, with...

JVN#29657972: TP-Link RE300 V1 tdpServer vulnerable to improper processing of its input

tdpServer of TP-Link RE300 V1 improperly processes its input, possibly resulting to crash CWE-228. Impact An attacker may be able to cause a denial-of-service DoS condition of the product's OneMesh function. Solution Update the software Update the software to the latest version according to the...

PT-2022-5840 · Tp Link · Tp-Link Re300

Name of the Vulnerable Software and Affected Versions: TP-Link RE300 version V1 Description: The issue is related to the tdpServer of the TP-Link RE300 V1, which improperly processes its input. This may allow an attacker to cause a denial-of-service DoS condition of the product's OneMesh function...

CVE-2021-27246

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 AC1750 1.0.15 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of MAC addresses by the tdpServer endpoin...

CVE-2021-27246

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 AC1750 1.0.15 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of MAC addresses by the tdpServer endpoin...

CVE-2021-27246

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 AC1750 1.0.15 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of MAC addresses by the tdpServer endpoin...

CVE-2021-27246

CVE-2021-27246 affects TP-Link Archer A7 AC1750 (firmware 1.0.15). The flaw lies in the tdpServer MAC address handling: a crafted TCP message can write stack pointers to the stack, enabling network-adjacent attackers to execute code with root privileges. No authentication is required. This vulner...

CVE-2021-27246: Stack-based Buffer Overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 AC1750 1.0.15 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of MAC addresses by the tdpServer endpoin...

PT-2021-17352

Name of the Vulnerable Software and Affected Versions: TP-Link Archer A7 AC1750 version 1.0.15 Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the...

TP-Link AC1750 sync-server Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of MAC addresses by the tdpServer endpoint. A...

TP-Link Archer A7 AC1750 Command Injection Vulnerability

TP-Link Archer A7 AC1750 is a wireless router from TP-Link. tdpServer security vulnerability exists in TP-Link Archer A7 AC1750 devices before version 201029, which can be exploited by attackers to execute arbitrary code from mac parameters...

CVE-2020-28347

tdpServer on TP-Link Archer A7 AC1750 devices before 201029 allows remote attackers to execute arbitrary code via the slavemac parameter. NOTE: this issue exists because of an incomplete fix for CVE-2020-10882 in which shell quotes are mishandled...

CVE-2020-28347

tdpServer on TP-Link Archer A7 AC1750 devices before 201029 allows remote attackers to execute arbitrary code via the slavemac parameter. NOTE: this issue exists because of an incomplete fix for CVE-2020-10882 in which shell quotes are mishandled...

CVE-2020-28347

CVE-2020-28347 affects TP-Link Archer A7 AC1750 (tdpServer) prior to 201029; remote code execution via the slave_mac parameter due to an incomplete fix for CVE-2020-10882. Exploitation has been demonstrated in PoC/Metasploit modules; patched versions start at 201029 (and newer). If vulnerable, up...

PT-2020-16989

Name of the Vulnerable Software and Affected Versions tdpServer on TP-Link Archer A7 AC1750 devices before 201029 Description The issue allows remote attackers to execute arbitrary code via the slave mac parameter. This is due to an incomplete fix for a previous issue, where shell quotes are...

CVE-2020-28347: Improper Neutralization of Special Elements used in an OS Command

tdpServer on TP-Link Archer A7 AC1750 devices before 201029 allows remote attackers to execute arbitrary code via the slavemac parameter. NOTE: this issue exists because of an incomplete fix for CVE-2020-10882 in which shell quotes are mishandled...