4851 matches found
CVE-2023-36358
TP-Link TL-WR940N V2/V3/V4, TL-WR941ND V5/V6, TL-WR743ND V1 and TL-WR841N V8 were discovered to contain a buffer overflow in the component /userRpm/AccessCtrlAccessTargetsRpm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted GET request...
CVE-2023-36356
TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8, TL-WR941ND V5, and TL-WR740N V1/V2 were discovered to contain a buffer read out-of-bounds via the component /userRpm/VirtualServerRpm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted GET request...
CVE-2023-36359
CVE-2023-36359 affects TP-Link TL-WR940N (V4), TL-WR841N (V8/V10), TL-WR940N (V2/V3) and TL-WR941ND (V5/V6). The root cause is a buffer overflow in the /userRpm/QoSRuleListRpm component, enabling a Denial of Service via a crafted GET request. Public references consistently describe a DoS impact w...
CVE-2023-36355
Summary: CVE-2023-36355 affects the TP-Link TL-WR940N v4 router, via a buffer overflow in the WanDynamicIpV6CfgRpm endpoint when processing the ipStart parameter at /userRpm/WanDynamicIpV6CfgRpm, leading to a DoS. Public exploit/ PoC material exists (exploits reference the same endpoint with ipSt...
CVE-2023-36357
CVE-2023-36357 affects TP-Link TL-WR940N (V2/V4/V6), TL-WR841N (V8/V10), and TL-WR941ND (V5) in the LocalManageControlRpm component. The issue is described as a DoS triggered by a crafted GET request, caused by errors in resource release. Impact is Denial of Service on affected devices; no broade...
New DDoS Botnet ‘Condi’ Targets Vulnerable TP-Link AX21 Routers
By Deeba Ahmed FortiGuard Labs has identified numerous Condi DDoS botnet samples that exploit other known security flaws, putting unpatched software at a higher risk of being exploited by botnet malware. This is a post from HackRead.com Read the original post: New DDoS Botnet Condi Targets...
New Condi Malware Hijacking TP-Link Wi-Fi Routers for DDoS Botnet Attacks
A new malware called Condi has been observed exploiting a security vulnerability in TP-Link Archer AX21 AX1800 Wi-Fi routers to rope the devices into a distributed denial-of-service DDoS botnet. Fortinet FortiGuard Labs said the campaign has ramped up since the end of May 2023. Condi is the work ...
New Condi Malware Hijacking TP-Link Wi-Fi Routers for DDoS Botnet Attacks
A new malware called Condi has been observed exploiting a security vulnerability in TP-Link Archer AX21 AX1800 Wi-Fi routers to rope the devices into a distributed denial-of-service DDoS botnet. Fortinet FortiGuard Labs said the campaign has ramped up since the end of May 2023. Condi is the work ...
PT-2023-3421 · Tp Link · Tp-Link Tl-Wr941Nd +3
Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR940N versions V2 through V4 TP-Link TL-WR941ND versions V5 through V6 TP-Link TL-WR743ND version V1 TP-Link TL-WR841N version V8 Description: The issue is related to a buffer overflow in the /userRpm/AccessCtrlAccessTargetsRpm...
PT-2023-3441 · Tp Link · Tp-Link Tl-Wr940N
Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR940N version V4 Description: The issue is related to a buffer overflow in the WanDynamicIpV6CfgRpm component when handling the ipStart parameter. This can be exploited by sending a specially crafted GET request to the...
PT-2023-3453 · Tp Link · Tp-Link Tl-Wr941Nd +2
Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR940N versions V2 through V4 TP-Link TL-WR841N versions V8 through V10 TP-Link TL-WR941ND versions V5 through V6 Description: A buffer overflow was discovered in the /userRpm/QoSRuleListRpm component of TP-Link routers, allowing...
PT-2023-5454 · Tp Link · Tp-Link Archer C20
Name of the Vulnerable Software and Affected Versions: TP-Link Archer C20 versions prior to Archer C20JP V1 230616 Description: The issue is related to improper authentication in the TP-Link Archer C20 firmware, which can be exploited by a network-adjacent unauthenticated attacker to execute...
PT-2023-3454 · Tp Link · Tp-Link Tl-Wr941Nd +3
Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR940N versions V2, V3, V4 TP-Link TL-WR841N versions V8, V10 TP-Link TL-WR740N versions V1, V2 TP-Link TL-WR941ND versions V5, V6 Description: A buffer overflow was discovered in the /userRpm/AccessCtrlTimeSchedRpm component of...
TP-Link Archer AX10(EU)_V1.2_230220 Buffer Overflow Vulnerability
Exploit Title: Buffer Overflow in TP-Link Archer AX10EUV1.2230220 Exploit Author: Giuseppe Compare CVE: CVE-2023-34832 Vendor Homepage: https://www.tp-link.com/ Version: TP-Link Archer AX10EUV1.2230220 Buffer Overflow There is a buffer overflow in the FUN131e8 function due to using sprintf...
CVE-2023-34832
TP-Link Archer AX10EUV1.2230220 was discovered to contain a buffer overflow via the function FUN131e8 - 0x132B4...
CVE-2023-34832
TP-Link Archer AX10EUV1.2230220 was discovered to contain a buffer overflow via the function FUN131e8 - 0x132B4...
Buffer overflow
TP-Link Archer AX10EUV1.2230220 was discovered to contain a buffer overflow via the function FUN131e8 - 0x132B4...
The vulnerability of the FixMapCfgRpm component (/userRpm/FixMapCfgRpm.htm) in the microprogramming software for TP-Link routers such as TL-WR940N, TL-WR841N, and TL-WR740N allows a hacker to gain unauthorized access to protected information or cause service failures.
The vulnerability of the FixMapCfgRpm component /userRpm/FixMapCfgRpm.htm of the TP-Link routers TL-WR940N, TL-WR841N, and TL-WR740N lies in the copying of buffers without checking the size of the input data during the processing of the Changed parameter. Exploiting this vulnerability can allow a...
The vulnerability of the WlanMacFilterRpm component (/userRpm/WlanMacFilterRpm.htm) of the TP-Link routers TL-WR940N, TL-WR841N, and TL-WR740N allows a malicious actor to gain unauthorized access to protected information or cause service failures.
The vulnerability of the WlanMacFilterRpm component /userRpm/WlanMacFilterRpm.htm of the TP-Link TL-WR940N, TL-WR841N, and TL-WR740N routers is related to the copying of buffers without checking the size of input data when processing the Mac key parameter. Exploiting this vulnerability can allow ...