CVE-2021-44628

CVE-2021-44628 affects TP-Link WR-886N devices with firmware 20190826 2.3.8. The vulnerability is in the /cloud_config/router_post/login function and is described as a buffer overflow caused by improper data handling, allowing a remote attacker to execute arbitrary code by sending a crafted POST ...

CVE-2021-44628

A Buffer Overflow vulnerabiltiy exists in TP-LINK WR-886N 20190826 2.3.8 in thee /cloudconfig/routerpost/login feature, which allows malicious users to execute arbitrary code on the system via a crafted post request...

CVE-2021-44627

TP-LINK WR-886N (firmware version 20190826 2.3.8) contains a Buffer Overflow in the /cloud_config/router_post/get_reset_pwd_veirfy_code handler. Multiple sources (NVD CVE-2021-44627 and CNVD/CNNVD variants) describe that an unauthenticated or network-proximate attacker can trigger arbitrary code ...

CVE-2021-44627

A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloudconfig/routerpost/getresetpwdveirfycode feature, which allows malicious users to execute arbitrary code on the system via a crafted post request...

CVE-2021-44626

The CVE-2021-44626 entry concerns TP-LINK WR-886N firmware (20190826, version 2.3.8) with a Buffer Overflow vulnerability in the /cloud_config/router_post/get_reg_verify_code endpoint. An attacker can trigger arbitrary code execution by sending a crafted POST request, per sources in the CVE descr...

CVE-2021-44626

A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloudconfig/routerpost/getregverifycode feature, which allows malicious users to execute arbitrary code on the system via a crafted post request...

CVE-2021-44625

A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in /cloudconfig/clouddevice/info interface, which allows a malicious user to executee arbitrary code on the system via a crafted post request...

CVE-2021-44625

CVE-2021-44625 affects TP-LINK WR-886N (firmware 20190826 2.3.8) via the /cloud_config/cloud_device/info interface. The vulnerability is described as a buffer overflow that lets an unauthenticated attacker craft a POST request to execute arbitrary code on the device. Data from connected documents...

CVE-2021-44623

TP-LINK WR-886N (BI: 20190826, 2.3.8) is affected by CVE-2021-44623 due to a Buffer Overflow in the /cloud_config/router_post/check_reset_pwd_verify_code interface. Multiple sources describe a vulnerability that could crash the application or allow arbitrary code execution in the affected device ...

CVE-2021-44623

A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 via the /cloudconfig/routerpost/checkresetpwdverifycode interface...

CVE-2021-44622

CVE-2021-44622 affects TP-LINK WR-886N (firmware version 20190826 2.3.8) with a vulnerability in /cloud_config/router_post/check_reg_verify_code that enables a remote attacker to execute arbitrary code via a crafted POST request. Multiple connected sources describe this as a buffer/stack overflow...

CVE-2021-44622

A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloudconfig/routerpost/checkregverifycode function which could let a remove malicious user execute arbitrary code via a crafted post request...

Tp-link Archer C2 OS Command Injection Vulnerability

TP-Link Archer C2 is a wireless router from Tp-link.TP-Link Archer C20i version 0.9.1 3.2 v003a.0 Build 170221 Rel.55462n is vulnerable due to a security flaw in the device's HTTP parameter XTP ExternalIPv6Address. ExternalIPv6Address in the device lacks filtering and escaping of user data, which...

CVE-2021-4045

CVE-2021-4045 affects Tp-Link Tapo C200 IP cameras running firmware 1.1.15 and earlier. The vulnerability arises from a root-running uhttpd binary that does not properly filter/escape input, enabling an unauthenticated remote command execution (RCE) and full device compromise. Public documents co...

CVE-2021-4045 TP-LINK Tapo C200 remote code execution vulnerability

TP-Link Tapo C200 IP camera, on its 1.1.15 firmware version and below, is affected by an unauthenticated RCE vulnerability, present in the uhttpd binary running by default as root. The exploitation of this vulnerability allows an attacker to take full control of the camera...

CVE-2021-44032

The vulnerability CVE-2021-44032 affects TP-Link Omada SDN Software Controller prior to version 5.0.15. The root cause is that the controller does not validate whether the requested authentication method is allowed, enabling an attacker to bypass captive portal authentication by downgrading to a ...

CVE-2021-44032

TP-Link Omada SDN Software Controller before 5.0.15 does not check if the authentication method specified in a connection request is allowed. An attacker can bypass the captive portal authentication process by using the downgraded "no authentication" method, and access the protected network. For...

PT-2022-2572

Name of the Vulnerable Software and Affected Versions TP-Link Tapo C200 version 1.1.15 and below Description The issue is related to an unauthenticated remote code execution RCE vulnerability in the uhttpd binary, which runs by default as root. This vulnerability is caused by a lack of input data...

CVE-2021-44827

There is remote authenticated OS command injection on TP-Link Archer C20i 0.9.1 3.2 v003a.0 Build 170221 Rel.55462n devices vie the XTPExternalIPv6Address HTTP parameter, allowing a remote attacker to run arbitrary commands on the router with root privileges...

Command injection

There is remote authenticated OS command injection on TP-Link Archer C20i 0.9.1 3.2 v003a.0 Build 170221 Rel.55462n devices vie the XTPExternalIPv6Address HTTP parameter, allowing a remote attacker to run arbitrary commands on the router with root privileges...