CVE-2023-46535

CVE-2023-46535 affects TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin, with a stack overflow in the function getResetVeriRegister (buffer overflow when reading data). The issue is described across multiple sources, including a claim of potential remote code execution by exploiting this...

TP-LINK TL-WR886N and TL-WDR7660 Buffer Error Vulnerability

TP-LINK TL-WDR7660 and TP-LINK TL-WR886N are both products of China P&L TP-LINK.TP-LINK TL-WDR7660 is a Gigabit router.TP-LINK TL-WR886N is a wireless router. This router supports the 802.11n standard, providing higher wireless transmission rates and better wireless coverage. A buffer error...

CVE-2023-46373

CVE-2023-46373 affects TP-Link TL-WDR7660 firmware 2.0.30. The vulnerability is described as a stack overflow in the deviceInfoJsonToBincauses function, with CVSS 3.1/CRITICAL (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) indicating remote network-exposed impact without user interaction. The connected PT...

CVE-2023-46371

TP-Link device TL-WDR7660 2.0.30 and TL-WR886N 2.0.12 has a stack overflow vulnerability via the function upgradeInfoJsonToBin...

CVE-2023-46373

TP-Link TL-WDR7660 2.0.30 has a stack overflow vulnerability via the function deviceInfoJsonToBincauses...

CVE-2023-46373

TP-Link TL-WDR7660 2.0.30 has a stack overflow vulnerability via the function deviceInfoJsonToBincauses...

PT-2023-6571 · Tp Link · Tp-Link Tl-Wr886N +1

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WDR7660 version 2.0.30 TP-Link TL-WR886N version 2.0.12 Description: The issue is related to a stack overflow vulnerability in the upgradeInfoJsonToBin function of the TP-Link device's firmware, which can be exploited by a remote...

PT-2023-6572 · Tp Link · Tp-Link Tl-Wdr7660

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WDR7660 version 2.0.30 Description: The issue is related to a stack overflow vulnerability via the deviceInfoJsonToBincauses function, which can be exploited by a remote attacker to execute arbitrary code. This vulnerability is als...

CVE-2023-46371

Affected devices: TP-Link TL-WDR7660 (v2.0.30) and TL-WR886N (v2.0.12). Vulnerability: stack overflow in the firmware function upgradeInfoJsonToBin, caused by reading beyond buffer boundaries. Impact (as documented): potential remote code execution; described as a critical issue with high confide...

CVE-2023-46371

TP-Link device TL-WDR7660 2.0.30 and TL-WR886N 2.0.12 has a stack overflow vulnerability via the function upgradeInfoJsonToBin...

PT-2023-6591 · Tp Link · Tp-Link Tl-Wr886N

Name of the Vulnerable Software and Affected Versions: TP-LINK TL-WR886N version 7.0 3.0.14 Build 221115 Rel.56908n.bin Description: The issue is related to a stack overflow in the chkRegVeriRegister function, which can be exploited by a remote attacker to impact the integrity, availability, and...

PT-2023-6593 · Tp Link · Tp-Link Tl-Wr886N

Name of the Vulnerable Software and Affected Versions: TP-LINK TL-WR886N version 7.0 3.0.14 Build 221115 Rel.56908n.bin Description: The issue is related to a stack overflow in the registerRequestHandle function, which can be exploited by a remote attacker to impact the integrity, availability, a...

The vulnerability of the microprogrammed software of TP-Link Archer AX50, Archer A10, Archer AX10, and Archer AX11000 Wi-Fi routers exists due to the lack of measures taken to neutralize special elements used in the operating system. This vulnerability allows a hacker to execute arbitrary commands in the operating system.

The vulnerability of TP-Link Archer AX50, Archer A10, Archer AX10, and Archer AX11000 Wi-Fi routers exists due to the lack of measures taken to neutralize specific components used in the operating system. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands in the...

The vulnerability of TP-Link Deco M4 Mesh-system’s microprogramming software lies in the lack of measures to neutralize specific elements, allowing attackers to execute arbitrary commands.

The vulnerability of Mesh-system TP-Link Deco M4’s microprogramming software is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

TP-LINK TL-ER5120G Command Execution Vulnerability

The TP-LINK TL-ER5120G is a multi-WAN port Gigabit commercial router from China P&L TP-LINK. The TP-LINK TL-ER5120G suffers from a command execution vulnerability that stems from a rule name that fails to correctly filter constructed command special characters, commands, and so on. An attacker...

The vulnerability of TP-Link Archer C50, Archer C20, and Archer C2 Wi-Fi routers lies in the fact that the operation data can be accessed outside of the buffer in memory, allowing an attacker to cause a malfunction in the device.

The vulnerability of the microprogrammed software of TP-Link Archer C50, Archer C20, and Archer C2 Wi-Fi routers lies in the fact that the operation data is written outside the buffer in memory when processing request parameters. Exploiting this vulnerability can allow a remote attacker to cause...

CVE-2023-43135

There is an unauthorized access vulnerability in TP-LINK ER5120G 4.0 2.0.0 Build 210817 Rel.80868n, which allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management...

CVE-2023-43135

There is an unauthorized access vulnerability in TP-LINK ER5120G 4.0 2.0.0 Build 210817 Rel.80868n, which allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management...

CVE-2023-43135

There is an unauthorized access vulnerability in TP-LINK ER5120G 4.0 2.0.0 Build 210817 Rel.80868n, which allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management...

Design/Logic Flaw

There is an unauthorized access vulnerability in TP-LINK ER5120G 4.0 2.0.0 Build 210817 Rel.80868n, which allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management...