CVE-2018-12575

On TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 171019 Rel.55346n devices, all actions in the web interface are affected by bypass of authentication via an HTTP request...

CVE-2018-12577

The Ping and Traceroute features on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow authenticated blind Command Injection...

CVE-2018-12574

CSRF exists for all actions in the web interface on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices...

Command injection

The Ping and Traceroute features on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow authenticated blind Command Injection...

Security feature bypass

TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow clickjacking...

Authentication flaw

On TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 171019 Rel.55346n devices, all actions in the web interface are affected by bypass of authentication via an HTTP request...

Cross site request forgery (csrf)

CSRF exists for all actions in the web interface on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices...

CVE-2018-12576

TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow clickjacking...

CVE-2018-12576

TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow clickjacking...

CVE-2018-12575

On TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 171019 Rel.55346n devices, all actions in the web interface are affected by bypass of authentication via an HTTP request...

CVE-2018-12577

CVE-2018-12577 affects TP-Link TL-WR841N v13 devices (firmware 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n). The Ping and Traceroute features are susceptible to authenticated blind command injection due to unsanitized user input being incorporated into commands. An authenticated attacker can execu...

CVE-2018-12574

CVE-2018-12574 affects TP-Link TL-WR841N v13. The web UI is vulnerable to Cross-Site Request Forgery via a flawed referer-based protection: requests from crafted domains bypass the check and perform arbitrary actions as an authenticated user. Affected version: 0.9.1 4.16 v0001.0 Build 180119 Rel....

CVE-2018-12574

CSRF exists for all actions in the web interface on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices...

CVE-2018-12576

CVE-2018-12576 affects TP-Link TL-WR841N v13 (firmware 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n). The issue is a clickjacking vulnerability in the device’s web UI. CVSSv3.0 shows an attacker would need network access with user interaction required to trigger impact on UI integrity, with no conf...

CVE-2018-12575

The CVE-2018-12575 entry concerns TP-Link TL-WR841N v13 devices (firmware 0.9.1 4.16 v0001.0 Build 171019 Rel.55346n). Multiple connected records describe an authentication bypass in the router’s web interface: an unauthenticated attacker can send HTTP requests to CGI scripts to bypass login and ...

CVE-2018-12577

The Ping and Traceroute features on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow authenticated blind Command Injection...

TP-Link TL-WR841N V13 Cross Site Request Forgery Vulnerability

Exploit for hardware platform in category web applications Vulnerability: Cross-Site Request Forgery Affected Software: TP-Link TL-WR841N v13 Affected Version: 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n Patched Version: None Overview The web interface of the router is vulnerable to CSRF. An...

TP-Link TL-WR841N V13 Insecure Direct Object Reference Vulnerability

Exploit for hardware platform in category web applications Vulnerability: Broken Authentication Affected Software: TP-Link TL-WR841N v13 Affected Version: 0.9.1 4.16 v0001.0 Build 171019 Rel.55346n Patched Version: 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n Overview An attacker that can send HTTP...

TP-Link TL-WR841N V13 Command Injection Vulnerability

Exploit for hardware platform in category web applications Vulnerability: Authenticated Blind Command Injection Affected Software: TP-Link TL-WR841N v13 Affected Version: 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n Patched Version: None Overview The ping and traceroute functionalities allow for OS...

TP-Link TL-WR841N v13 Cross-Site Request Forgery Vulnerability

The TP-Link TL-WR841N v13 is a wireless router device. A cross-site request forgery vulnerability exists in the TP-Link TL-WR841N v13, which allows an attacker to authenticate a user's name to perform arbitrary operations...