Lucene search
+L

4978 matches found

CNNVD
CNNVD
added 2025/01/27 12:0 a.m.10 views

TP-LINK TL-SG108E 安全漏洞

TP-LINK TL-SG108E is a smart switch from China P&L TP-LINK. A security vulnerability exists in TP-Link TL-SG108E version 1.0.0 Build 20201208 Rel.40304, which stems from a parameter username/password in the file /usraccountset.cgi that can lead to the use of get request methods with sensitive que...

6.3CVSS4.7AI score0.00663EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/01/27 12:0 a.m.17 views

PT-2025-1309 · Tp Link · Tp-Link Tl-Sg108E

Name of the Vulnerable Software and Affected Versions: TP-Link TL-SG108E versions 1.0.0 Build 20201208 Rel. 40304 Description: A problematic vulnerability exists in the TP-Link TL-SG108E, affecting an unknown function within the /usr account set.cgi file of the HTTP GET Request Handler component...

6.3CVSS3.7AI score0.00663EPSS
SaveExploits1References14
OSV
OSV
added 2025/01/21 12:15 p.m.5 views

DEBIAN-CVE-2024-57930

In the Linux kernel, the following vulnerability has been resolved: tracing: Have processstring also allow arrays In order to catch a common bug where a TRACEEVENT TPfastassign assigns an address of an allocated string to the ring buffer and then references it in TPprintk, which can be executed...

5.5CVSS6AI score0.00198EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/01/16 12:0 a.m.9 views

TP-LINK TL-WR940N Buffer Overflow Vulnerability (CNVD-2025-02852)

The TP-LINK TL-WR940N is a wireless router from China P&L TP-LINK. The TP-LINK TL-WR940N suffers from a buffer overflow vulnerability that originates from a boundary error in the dnsserver1 and dnsserver2 parameters in /userRpm/Wan6to4TunnelCfgRpm.htm when processing untrusted input. An attacker...

8CVSS8.2AI score0.05411EPSS
SaveExploits1References1
OSV
OSV
added 2025/01/09 8:15 p.m.6 views

CVE-2024-54887

TP-Link TL-WR940N V3 and V4 with firmware 3.16.9 and earlier contain a buffer overflow via the dnsserver1 and dnsserver2 parameters at /userRpm/Wan6to4TunnelCfgRpm.htm. This vulnerability allows an authenticated attacker to execute arbitrary code on the remote device in the context of the root us...

8CVSS6.4AI score0.05411EPSS
SaveExploits1References2
NVD
NVD
added 2025/01/09 8:15 p.m.16 views

CVE-2024-54887

TP-Link TL-WR940N V3 and V4 with firmware 3.16.9 and earlier contain a buffer overflow via the dnsserver1 and dnsserver2 parameters at /userRpm/Wan6to4TunnelCfgRpm.htm. This vulnerability allows an authenticated attacker to execute arbitrary code on the remote device in the context of the root us...

8CVSS0.05411EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/01/09 12:0 a.m.9 views

CVE-2024-54887

TP-Link TL-WR940N V3 and V4 with firmware 3.16.9 and earlier contain a buffer overflow via the dnsserver1 and dnsserver2 parameters at /userRpm/Wan6to4TunnelCfgRpm.htm. This vulnerability allows an authenticated attacker to execute arbitrary code on the remote device in the context of the root us...

8.2AI score0.05411EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/01/09 12:0 a.m.9 views

TP-LINK TL-WR940N 安全漏洞

The TP-LINK TL-WR940N is a wireless router from China P&L TP-LINK. The TP-LINK TL-WR940N suffers from a buffer overflow vulnerability that originates from a boundary error in the dnsserver1 and dnsserver2 parameters in /userRpm/Wan6to4TunnelCfgRpm.htm when processing untrusted input. An attacker...

8CVSS8.2AI score0.05411EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/01/09 12:0 a.m.21 views

CVE-2024-54887

TP-Link TL-WR940N V3 and V4 with firmware 3.16.9 and earlier contain a buffer overflow via the dnsserver1 and dnsserver2 parameters at /userRpm/Wan6to4TunnelCfgRpm.htm. This vulnerability allows an authenticated attacker to execute arbitrary code on the remote device in the context of the root us...

0.05411EPSS
SaveExploits1References1
CVE
CVE
added 2025/01/09 12:0 a.m.120 views

CVE-2024-54887

Affected product: TP-Link TL-WR940N (V3/V4) with firmware 3.16.9 or earlier. The issue is a buffer overflow in handling dnsserver1 and dnsserver2 parameters at /userRpm/Wan6to4TunnelCfgRpm.htm, allowing an authenticated attacker to execute arbitrary code as root. Some sources indicate a PoC explo...

8CVSS8.5AI score0.05411EPSS
SaveExploits1References1Affected Software1
CNVD
CNVD
added 2024/12/20 12:0 a.m.15 views

TP-LINK WR845N Weak Encryption Vulnerability

The TP-LINK WR845N is a wireless router from China P&L TP-LINK. A weak encryption vulnerability exists in the TP-LINK WR845N version V4190219, which originates from transmitting credentials in base64 encoded form, and can be exploited by an attacker to easily decode them via a man-in-the-middle...

8CVSS6.6AI score0.00228EPSS
SaveExploits0References1
Malwarebytes
Malwarebytes
added 2024/12/19 5:40 p.m.18 views

TP-Link faces US national security probe, potential ban on devices

The US government launched a national security investigation into the popular, Chinese-owned router maker TP-Link, with a potential eye on banning the company's devices in the United States. The investigation comes amid heightened tension between the US and the Chinese government, and after a...

7.5AI score
SaveExploits0
CNVD
CNVD
added 2024/12/13 12:0 a.m.47 views

TP-LINK VN020 Buffer Overflow Vulnerability

The TP-LINK VN020 is a wireless modem from China P&L TP-LINK. A security vulnerability exists in TP-Link VN020 F3vT TTV6.2.1021 version, which originates from a buffer overflow in the parameter NewConnectionType in the component SOAP request handler. An attacker can exploit this vulnerability to...

8.8CVSS7.4AI score0.04719EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/12/13 12:0 a.m.7 views

TP-LINK VN020 Buffer Overflow Vulnerability

The TP-LINK VN020 is a wireless modem from China P&L TP-LINK. The TP-LINK VN020 suffers from a buffer overflow vulnerability that originates when improper operation of the component FTP USER command handler can result in memory corruption. An unauthenticated attacker could exploit this...

9.8CVSS8AI score0.01842EPSS
SaveExploits3References1
BDU FSTEC
BDU FSTEC
added 2024/12/12 12:0 a.m.12 views

The vulnerability of the SOAP request handler in the microprogramming software for TP-Link Wi-Fi routers VN020 F3v(T) allows a hacker to trigger a service failure.

The vulnerability of the SOAP request handler in the microprogramming software for TP-Link Wi-Fi routers, model VN020 F3vT, relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

8.8CVSS6.9AI score0.04719EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/12 12:0 a.m.10 views

The vulnerability in the web interface of the Wi-Fi router software developed by TP-Link Archer C50 allows a hacker to execute arbitrary code and trigger a service failure.

The vulnerability in the web interface of TP-Link Archer C50 Wi-Fi routers involves loading code without checking its integrity. Exploiting this vulnerability allows an attacker to execute arbitrary code and cause service failures...

7.7CVSS6AI score0.0014EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/12 12:0 a.m.12 views

The vulnerability in the web interface of the microprogramming software for TP-Link Archer C50 allows a intruder to gain unauthorized access to the credentials of the target Wi-Fi system.

The vulnerability of the web-based management interface for TP-Link Archer C50 wireless routers involves the unencrypted storage of critical information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the credentials of the target Wi-Fi system...

4.8CVSS5.5AI score0.00153EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/11 12:0 a.m.12 views

The vulnerability of the USER command processor in TP-Link VN020 F3v(T) wireless routers allows a hacker to cause a service failure.

The vulnerability of the USER command handler in TP-Link VN020 F3vT Wi-Fi routers lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to cause service failures remotely...

6.5CVSS6.9AI score0.01842EPSS
SaveExploits3References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/11 12:0 a.m.10 views

The vulnerability of the Incomplete SOAP Request Handler component in TP-Link VN020 F3v(T) software, a wireless router, allows a malicious actor to trigger a service failure.

The vulnerability of the Incomplete SOAP Request Handler component in the TP-Link VN020 F3vT wireless router software relates to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failure remotely...

6.5CVSS6.5AI score0.08886EPSS
SaveExploits2References4Affected Software1
NVD
NVD
added 2024/12/10 8:15 p.m.39 views

CVE-2024-46341

TP-Link TL-WR845NUNV4190219 was discovered to transmit credentials in base64 encoded form, which can be easily decoded by an attacker executing a man-in-the-middle attack...

8CVSS0.00228EPSS
SaveExploits0References1
Rows per page
Query Builder