5770 matches found
CISA Adds TP-Link and WhatsApp Flaws to KEV Catalog Amid Active Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added a high-severity security flaw impacting TP-Link TL-WA855RE Wi-Fi Ranger Extender products to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerability, CVE-2020-24363...
Android applications for controlling TP-Link Tapo IP cameras Privilege Escalation
The vulnerability of the Android application for controlling TP-Link Tapo IP cameras is related to insecure management of privileges. Exploiting this vulnerability can allow a hacker to enhance their privileges...
TP-Link TL-WR841N V11 Buffer Overflow
The vulnerability of TP-Link TL-WR841N V11 router’s microprogramming software lies in the fact that the operation data is written outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to cause a service failure...
TP-Link TL-WR841N V11 Buffer Overflow
The vulnerability of TP-Link TL-WR841N V11 router’s microprogramming software lies in the fact that the operation data is written outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to cause a service failure...
TP-Link VIGI NVR1104H-4P Network Video Recorder Command Injection
The vulnerability of TP-Link VIGI NVR1104H-4P V1 and VIGI NVR2016H-16MP V2 network video recorders lies in the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
TP-Link TL-WR841N V11 Buffer Overflow
The vulnerability of TP-Link TL-WR841N V11 router’s microprogramming software lies in the fact that the operation data is written outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to cause a service failure...
TP-Link TL-WR841N V11 Buffer Overflow
The vulnerability of TP-Link TL-WR841N V11 router’s microprogramming software lies in the fact that the operation data is written outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to cause a service failure...
TP-Link KP303 Authentication Bypass Information Disclosure
The vulnerability of TP-Link KP303 microprogramming software is related to the absence of authentication for critical functions. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands, cause service failures, or disclose protected information...
TP-Link TL-WR841N V11 Buffer Overflow
The vulnerability of TP-Link TL-WR841N V11 router’s microprogramming software lies in the fact that the operation data is written outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to cause a service failure...
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2020-24363link is external TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability CVE-2025-55177link is external Meta Platforms WhatsApp...
VulnCheck KEV: CVE-2020-24363
TP-link TL-WA855RE contains a missing authentication for critical function vulnerability. This vulnerability could allow an unauthenticated attacker on the same network to submit a TDDPRESET POST request for a factory reset and reboot. The attacker can then obtain incorrect access control by...
CVE-2025-8627
The TP-Link KP303 Smartplug can be issued unauthenticated protocol commands that may cause unintended power-off condition and potential information leak. This issue affects TP-Link KP303 US Smartplug: before 1.1.0...
CVE-2025-9377
The authenticated remote command execution RCE vulnerability exists in the Parental Control page on TP-Link Archer C7EU V2 and TL-WR841N/NDMS V9. This issue affects Archer C7EU V2: before 241108 and TL-WR841N/NDMS V9: before 241108. Both products have reached the status of EOL end-of-life. It's...
CVE-2025-9377: Improper Neutralization of Special Elements used in an OS Command
The authenticated remote command execution RCE vulnerability exists in the Parental Control page on TP-Link Archer C7EU V2 and TL-WR841N/NDMS V9. This issue affects Archer C7EU V2: before 241108 and TL-WR841N/NDMS V9: before 241108. Both products have reached the status of EOL end-of-life. It's...
VulnCheck KEV: CVE-2025-9377
TP-Link Archer C7EU and TL-WR841N/NDMS contain an OS command injection vulnerability that exists in the Parental Control page. The impacted products could be end-of-life EoL and/or end-of-service EoS. Users should discontinue product utilization...
VulnCheck KEV: CVE-2023-50224
TP-Link TL-WR841N contains an authentication bypass by spoofing vulnerability within the httpd service, which listens on TCP port 80 by default, leading to the disclose of stored credentials. The impacted products could be end-of-life EoL and/or end-of-service EoS. Users should discontinue produc...
CVE-2025-8627
The TP-Link KP303 Smartplug can be issued unauthenticated protocol commands that may cause unintended power-off condition and potential information leak. This issue affects TP-Link KP303 US Smartplug: before 1.1.0...
CVE-2025-8627 Unauthenticated Protocol Commands on TP-Link KP303
The TP-Link KP303 Smartplug can be issued unauthenticated protocol commands that may cause unintended power-off condition and potential information leak. This issue affects TP-Link KP303 US Smartplug: before 1.1.0...
TP-Link KP303 安全漏洞
TP-Link KP303 is a smart plug-in board from China P&L TP-Link. A security vulnerability exists in the TP-Link KP303 version prior to 1.1.0, which stems from the ability to issue unauthenticated protocol commands that could result in unexpected power loss and information disclosure...
CVE-2025-8627: Missing Authentication for Critical Function
The TP-Link KP303 Smartplug can be issued unauthenticated protocol commands that may cause unintended power-off condition and potential information leak. This issue affects TP-Link KP303 US Smartplug: before 1.1.0...