4869 matches found
Command Execution Vulnerability in Multiple Interfaces of TP_LINK TL-WAR302 Router
TPLINK TL-WAR302 is an enterprise-grade 300M wireless VPN router with support for multiple VPN clients and Internet behavior management. A command execution vulnerability exists in multiple interfaces of the TPLINK TL-WAR302 router. The vulnerability is caused due to TP-LINK WAR302 multiple...
TP-Link TL-WR841N v13 Authentication Command Injection Vulnerability
The TP-Link TL-WR841N v13 is a wireless router device. An authentication command injection vulnerability exists in the TP-Link TL-WR841N v13 ping and traceroute functions. An authenticated attacker can execute arbitrary commands on the router by sending specific CREST HTTP requests to the router...
TP-Link TL-WA850RE - Remote Command Execution
!/usr/bin/env python Exploit Title: TP-Link Technologies TL-WA850RE Wi-Fi Range Extender - Command Execution Date: 19/06/2018 Exploit Author: yoresongo - Advisability S.A.S Colombia www.advisability.co Vendor Homepage: https://www.tp-link.com/ Firmware Link:...
TP-Link TL-WR841N V13 Insecure Direct Object Reference
Vulnerability: Broken Authentication Affected Software: TP-Link TL-WR841N v13 Affected Version: 0.9.1 4.16 v0001.0 Build 171019 Rel.55346n Patched Version: 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n Risk: High Vendor Contacted: 05/20/2018 Vendor Fix: Issue was independently fixed in previous...
TP-Link TL-WR841N and TL-WR841ND Cross-Site Request Forgery Vulnerability
The TP-Link TL-WR841N and TL-WR841ND are both wireless router devices. TP-Link TL-WR841N and TL-WR841ND cross-site request forgery vulnerability. An attacker could use this vulnerability to perform certain administrator actions and gain unauthorized access to affected applications, and other...
TP-Link TL-WR841N V13 Cross Site Request Forgery
Vulnerability: Cross-Site Request Forgery Affected Software: TP-Link TL-WR841N v13 Affected Version: 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n Patched Version: None Risk: High Vendor Contacted: 05/20/2018 Vendor Fix: None Public Disclosure: 06/27/2018 Overview The web interface of the router is...
TP-Link TL-WR841N V13 Command Injection
Vulnerability: Authenticated Blind Command Injection Affected Software: TP-Link TL-WR841N v13 Affected Version: 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n Patched Version: None Risk: High Vendor Contacted: 05/20/2018 Vendor Fix: None Public Disclosure: 06/27/2018 Overview The ping and traceroute...
TP-Link TL-WA850RE Denial of Service Vulnerability (CNVD-2018-12045)
TP-Link TL-WA850RE Wi-Fi Range Extender is a wireless network signal extender from China P&L TP-LINK. A security vulnerability exists in the TP-Link TL-WA850RE Wi-Fi Range Extender using firmware version TL-WA850REv5180228. A remote attacker can exploit the vulnerability to cause a denial of...
TP-Link TL-WA850RE Wi-Fi Range Extender Heap Buffer Overflow Vulnerability
TP-Link TL-WA850RE Wi-Fi Range Extender is a wireless network signal extender from China P&L TP-LINK. A heap buffer overflow vulnerability exists in the TP-Link TL-WA850RE Wi-Fi Range Extender using firmware version TL-WA850REv5180228. A remote attacker can exploit this vulnerability to cause a...
Design/Logic Flaw
TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote attackers to cause a denial of service reboot via data/reboot.json...
Stack overflow
Stack-based buffer overflow in TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote authenticated users to cause a denial of service outage via a long type parameter to /data/syslog.filter.json...
CVE-2018-12693
Stack-based buffer overflow in TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote authenticated users to cause a denial of service outage via a long type parameter to /data/syslog.filter.json...
CVE-2018-12694
TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote attackers to cause a denial of service reboot via data/reboot.json...
CVE-2018-12692
TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the wpssetuppin parameter to /data/wps.setup.json...
Code injection
TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the wpssetuppin parameter to /data/wps.setup.json...
CVE-2018-12692
TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the wpssetuppin parameter to /data/wps.setup.json...
CVE-2018-12693
The CVE-2018-12693 entry concerns TP-Link TL-WA850RE Range Extender (hardware v5). A stack-based/heap buffer overflow exists in handling a long value for the type parameter via /data/syslog.filter.json, enabling remote authenticated users to cause a denial of service (outage). Multiple connected ...
CVE-2018-12694
The vulnerability CVE-2018-12694 affects the TP-Link TL-WA850RE Wi‑Fi Range Extender (hardware version 5). A remote attacker can cause a denial of service (reboot) by accessing data/reboot.json. Connected sources corroborate the device model and reboot-based DoS vector, with references noting fir...
CVE-2018-12693
Stack-based buffer overflow in TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote authenticated users to cause a denial of service outage via a long type parameter to /data/syslog.filter.json...