4861 matches found
Hardcoded credentials
The web app client of TP-Link AX10v1 V1211117 uses hard-coded cryptographic keys when communicating with the router. Attackers who are able to intercept the communications between the web client and router through a man-in-the-middle attack can then obtain the sequence key via a brute-force attac...
CVE-2022-42202
TP-Link TL-WR841N 8.0 4.17.16 Build 120201 Rel.54750n is vulnerable to Cross Site Scripting XSS...
CVE-2022-42202
TP-Link TL-WR841N 8.0 4.17.16 Build 120201 Rel.54750n is vulnerable to Cross Site Scripting XSS...
Cross site scripting
TP-Link TL-WR841N 8.0 4.17.16 Build 120201 Rel.54750n is vulnerable to Cross Site Scripting XSS...
CVE-2022-41541
TP-Link AX10v1 V1211117 allows attackers to execute a replay attack by using a previously transmitted encrypted authentication message and valid authentication token. Attackers are able to login to the web application as an admin user...
CVE-2022-41541
TP-Link AX10v1 V1211117 allows attackers to execute a replay attack by using a previously transmitted encrypted authentication message and valid authentication token. Attackers are able to login to the web application as an admin user...
CVE-2022-42202
CVE-2022-42202 affects the TP-Link TL-WR841N, specifically version 8.0 4.17.16 Build 120201 Rel.54750n. The vulnerability is described as a Cross-Site Scripting (XSS) flaw stemming from inadequate protection of the web page structure, enabling an attacker to perform XSS. Multiple connected source...
CVE-2022-42202
TP-Link TL-WR841N 8.0 4.17.16 Build 120201 Rel.54750n is vulnerable to Cross Site Scripting XSS...
CVE-2022-41540
CVE-2022-41540 affects the TP-Link AX10v1 web app client for V1_211117, where the client uses hard-coded cryptographic keys when talking to the router. This enables a man-in-the-middle attacker to brute-force the sequence key and potentially access sensitive information. Public details indicate a...
CVE-2022-41541
TP-Link AX10v1 (firmware V1_211117) is vulnerable to a replay attack where an attacker reuses a previously encrypted authentication message and valid token, enabling login to the web admin interface. The available sources confirm the authentication flaw and admin access possibility; no explicit e...
TP-LINK AX10 安全漏洞
TP-LINK AX10 is a router from China P&L TP-LINK. A security vulnerability exists in TP-LINK AX10 version V12111117. An attacker exploited the vulnerability to log in to the web application as an administrator user...
PT-2022-6112 · Tp Link · Tp-Link Ax10V1
Name of the Vulnerable Software and Affected Versions: TP-Link AX10v1 version V1 211117 Description: The web app client of TP-Link AX10v1 uses hard-coded cryptographic keys when communicating with the router. This allows attackers to obtain the sequence key via a brute-force attack if they can...
CVE-2022-41540
The web app client of TP-Link AX10v1 V1211117 uses hard-coded cryptographic keys when communicating with the router. Attackers who are able to intercept the communications between the web client and router through a man-in-the-middle attack can then obtain the sequence key via a brute-force attac...
CVE-2022-42202
TP-Link TL-WR841N 8.0 4.17.16 Build 120201 Rel.54750n is vulnerable to Cross Site Scripting XSS...
CVE-2022-41540
The web app client of TP-Link AX10v1 V1211117 uses hard-coded cryptographic keys when communicating with the router. Attackers who are able to intercept the communications between the web client and router through a man-in-the-middle attack can then obtain the sequence key via a brute-force attac...
PT-2022-6113 · Tp Link · Tp-Link Ax10V1
Name of the Vulnerable Software and Affected Versions: TP-Link AX10v1 version V1 211117 Description: The issue allows attackers to execute a replay attack by using a previously transmitted encrypted authentication message and valid authentication token, enabling them to login to the web applicati...
TP-LINK AX10 信任管理问题漏洞
The TP-LINK AX10 is a router from China P&L TP-LINK. A security vulnerability exists in the TP-LINK AX10 version V12111117, which originates from the use of hard-coded encryption keys by web application clients when communicating with the router. An attacker could use this vulnerability to obtain...
The vulnerability in the web interface of the configuration software for TP-Link M7350 allows a hacker to execute arbitrary commands.
The vulnerability of the web interface for configuring microprogramming software on TP-Link M7350 routers is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
TP-LINK AX10 Code Injection Vulnerability
TP-LINK AX10 is a router from TP-LINK, China. TP-LINK AX10 version 1.3.1 is vulnerable to a code injection vulnerability, which stems from the ability to execute arbitrary code via a specially crafted backup file. An attacker could use this vulnerability to generate illegal code segments that...
PT-2022-5729 · Tp Link · Tp-Link Tl-Wr841N
Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR841N version 8.0 4.17.16 Build 120201 Rel.54750n Description: The issue exists due to inadequate protection of the web page structure, allowing a remote attacker to conduct cross-site scripting attacks. Recommendations: For TP-Li...