TP-LINK TL-WR841N 安全漏洞

TP-LINK TL-WR841N is a wireless router from China P&L TP-LINK. A security vulnerability exists in the TP-LINK TL-WR841N V11 version, which originates from insufficient validation of input parameters in the /userRpm/WzdWlanSiteSurveyRpmAP.htm file, which could result in a buffer overflow and denia...

CVE-2025-53713: Buffer Copy without Checking Size of Input

A vulnerability has been found in TP-Link TL-WR841N V11. The vulnerability exists in the /userRpm/WlanNetworkRpmAPC.htm file due to missing input parameter validation, which may lead to the buffer overflow to cause a crash of the web service and result in a denial-of-service DoS condition. The...

PT-2025-31239 · Tp Link · Tp-Link Tl-Wr841N

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR841N version V11 Description: A vulnerability exists in the /userRpm/Wan6to4TunnelCfgRpm.htm file due to missing input parameter validation. This may lead to a buffer overflow, causing a crash of the web service and resulting in ...

PT-2025-31236 · Tp Link · Tp-Link Tl-Wr841N

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR841N version V11 Description: A vulnerability exists in the /userRpm/WlanNetworkRpm AP.htm file due to missing input parameter validation, which may lead to a buffer overflow causing a crash of the web service and resulting in a...

TP-Link VIGI NVR1104H-4P and VIGI NVR2016H-16MP vulnerable to OS command injection

Overview VIGI NVR1104H-4P and VIGI NVR2016H-16MP provided by TP-Link Systems Inc. contain multiple vulnerabilities listed below. OS command injection CWE-78 - CVE-2025-7723, CVE-2025-7724 Chuya Hayakawa of 00One, Inc. reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the...

TP-Link TL-WPA8630 Sub Process Overflow

The vulnerability of the sub4256CC function in TP-Link TL-WPA8630 router software lies in the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

JVN#39913189: TP-Link Archer C1200 vulnerable to clickjacking

Archer C1200 provided by TP-Link Systems Inc. contains the following vulnerability. Clickjacking CWE-1021 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N Base Score 5.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N Base Score 4.3 CVE-2025-6983 Impact If a user views a malicious pag...

TP-Link VIGI NVR1104H-4P V1和TP-Link VIGI NVR2016H-16MP V2 操作系统命令注入漏洞

TP-Link VIGI NVR1104H-4P V1 and TP-Link VIGI NVR2016H-16MP V2 are both network video recorders from China P&L TP-Link. An operating system command injection vulnerability exists in the VIGI NVR1104H-4P V1 prior to version 1.1.5 Build 250518 and the VIGI NVR2016H-16MP V2 prior to version 1.3.1 Bui...

VIGI NVR1104H-4P V1和VIGI NVR2016H-16MP V2 操作系统命令注入漏洞

TP-Link VIGI NVR1104H-4P V1 and TP-Link VIGI NVR2016H-16MP V2 are both network video recorders from China P&L TP-Link. Operating system command injection vulnerability exists in VIGI NVR1104H-4P V1 prior to version 1.1.5 Build 250518 and VIGI NVR2016H-16MP V2 prior to version 1.3.1 Build 250407,...

CVE-2025-6983

A Clickjacking vulnerability in TP-Link Archer C1200 web management page allows an attacker to trick users into performing unintended actions via rendered UI layers or frames.This issue affects Archer C1200 = 1.1.5...

CVE-2025-6982

Use of Hard-coded Credentials in TP-Link Archer C50 V3 = 180703/V4 = 250117 /V5 = 200407 , and C20 V5...

CVE-2025-6982

Use of Hard-coded Credentials in TP-Link Archer C50 V3 = 180703/V4 = 250117 /V5 = 200407 , and C20 V5 USV5260419 or EUV5260317 allows attackers to decrypt the config.xml files...

CVE-2025-6983

A Clickjacking vulnerability in TP-Link Archer C1200 web management page allows an attacker to trick users into performing unintended actions via rendered UI layers or frames.This issue affects Archer C1200 = 1.1.5...

CVE-2025-6983

CVE-2025-6983 affects TP-Link Archer C1200 web management, with a clickjacking flaw in versions 1.1.5 and earlier. An attacker could trick a logged-in user into performing unintended actions via layered UI/frames. No exploitation details are provided in the initial and connected documents, but mu...

CVE-2025-6983 Clickjacking vulnerability on the management web application of TP-LINK Archer C1200

A Clickjacking vulnerability in TP-Link Archer C1200 web management page allows an attacker to trick users into performing unintended actions via rendered UI layers or frames.This issue affects Archer C1200 = 1.1.5...

CVE-2025-6983 Clickjacking vulnerability on the management web application of TP-LINK Archer C1200

A Clickjacking vulnerability in TP-Link Archer C1200 web management page allows an attacker to trick users into performing unintended actions via rendered UI layers or frames.This issue affects Archer C1200 = 1.1.5...

CVE-2025-6982 Hardcoded DES Decryption Keys in TP-Link Archer C50 V3/V4/V5 and C20 V5

Use of Hard-coded Credentials in TP-Link Archer C50 V3 = 180703/V4 = 250117 /V5 = 200407 , and C20 V5 USV5260419 or EUV5260317 allows attackers to decrypt the config.xml files...

CVE-2025-6982

CVE-2025-6982 affects TP-Link Archer C50 V3/V4/V5 firmware with hard-coded DES decryption keys, allowing offline decryption of config.xml and potential exposure of admin credentials and settings. Affected versions are V3 (<=180703), V4 (<=250117), and V5 (

CVE-2025-6982 Hardcoded DES Decryption Keys in TP-Link Archer C50 V3/V4/V5 and C20 V5

Use of Hard-coded Credentials in TP-Link Archer C50 V3 = 180703/V4 = 250117 /V5 = 200407 , and C20 V5 USV5260419 or EUV5260317 allows attackers to decrypt the config.xml files...

CVE-2025-6983: Improper Restriction of Rendered UI Layers or Frames

A Clickjacking vulnerability in TP-Link Archer C1200 web management page allows an attacker to trick users into performing unintended actions via rendered UI layers or frames.This issue affects Archer C1200 = 1.1.5...