4978 matches found
CVE-2024-54127
CVE-2024-54127 concerns TP-Link Archer C50. The issue arises from terminal access on the device’s serial interface without proper access control, allowing a physically present attacker to access the UART shell and potentially obtain Wi‑Fi credentials. Connected sources corroborate that the vulner...
CVE-2024-54127 Exposure of Wi-Fi Credentials in Plaintext in TP-Link Archer C50
This vulnerability exists in the TP-Link Archer C50 due to presence of terminal access on a serial interface without proper access control. An attacker with physical access could exploit this by accessing the UART shell on the vulnerable device. Successful exploitation of this vulnerability could...
CVE-2024-54127 Exposure of Wi-Fi Credentials in Plaintext in TP-Link Archer C50
This vulnerability exists in the TP-Link Archer C50 due to presence of terminal access on a serial interface without proper access control. An attacker with physical access could exploit this by accessing the UART shell on the vulnerable device. Successful exploitation of this vulnerability could...
CVE-2024-54126
CVE-2024-54126 affects the TP-Link Archer C50. The root cause is an improper signature verification in the firmware upgrade process via the web interface. An attacker with administrative privileges within the router’s Wi‑Fi range can upload and execute malicious firmware, potentially resulting in...
CVE-2024-54126 Insufficient Integrity Verification Vulnerability in TP-Link Archer C50
This vulnerability exists in the TP-Link Archer C50 due to improper signature verification mechanism in the firmware upgrade process at its web interface. An attacker with administrative privileges within the router’s Wi-Fi range could exploit this vulnerability by uploading and executing malicio...
CVE-2024-54126 Insufficient Integrity Verification Vulnerability in TP-Link Archer C50
This vulnerability exists in the TP-Link Archer C50 due to improper signature verification mechanism in the firmware upgrade process at its web interface. An attacker with administrative privileges within the router’s Wi-Fi range could exploit this vulnerability by uploading and executing malicio...
PT-2024-9342 · Tp Link · Tp-Link Archer C50
Name of the Vulnerable Software and Affected Versions: TP-Link Archer C50 affected versions not specified Description: The issue is related to the improper signature verification mechanism in the firmware upgrade process at the web interface of the TP-Link Archer C50. This allows an attacker with...
PT-2024-9343 · Tp Link · Tp-Link Archer C50
Name of the Vulnerable Software and Affected Versions: TP-Link Archer C50 affected versions not specified Description: The issue is related to the storage of critical information in an unencrypted manner in the web interface of the TP-Link Archer C50 Wi-Fi router. This could allow an attacker to...
TP-Link Archer C50 安全漏洞
The TP-LINK Archer C50 is a wireless router from China P&L TP-LINK. A security vulnerability exists in the TP-Link Archer C50 prior to version V4 240917, which stems from terminal access on the serial interface that is not properly privileged, allowing an attacker to obtain Wi-Fi credentials on t...
The vulnerability of the DHCP server of TP-Link’s Wi-Fi router software, the VN020 F3v(T), allows a intruder to cause a service failure.
The vulnerability of the DHCP server of TP-Link’s Wi-Fi router model VN020 F3vT lies in the issue where operations are performed outside the buffer in memory when processing the hostname parameter. Exploiting this vulnerability allows an attacker to cause a service failure by sending specially...
ABB Cylon Aspect 3.08.01 mstpstatus.php Information Disclosure Vulnerability
ABB Cylon Aspect version 3.08.01 suffers from an unauthenticated information disclosure vulnerability. An unauthorized attacker can reference the affected page and disclose various BACnet MS/TP statistics running on the device. ABB Cylon Aspect 3.08.01 mstpstatus.php Information Disclosure Vendor...
CVE-2024-53375
An Authenticated Remote Code Execution RCE vulnerability affects the TP-Link Archer router series. A vulnerability exists in the "tmpgetsites" function of the HomeShield functionality provided by TP-Link. This vulnerability is still exploitable without the activation of the HomeShield functionali...
ABB Cylon Aspect 3.08.01 mstpstatus.php Information Disclosure
ABB Cylon Aspect 3.08.01 mstpstatus.php Information Disclosure Vendor: ABB Ltd. Product web page: https://www.global.abb Affected version: NEXUS Series, MATRIX-2 Series, ASPECT-Enterprise, ASPECT-Studio Firmware: =3.08.01 Summary: ASPECT is an award-winning scalable building energy management and...
CVE-2024-53375
An Authenticated Remote Code Execution RCE vulnerability affects the TP-Link Archer router series. A vulnerability exists in the "tmpgetsites" function of the HomeShield functionality provided by TP-Link. This vulnerability is still exploitable without the activation of the HomeShield functionali...
TP-Link Archer 安全漏洞
TP-LINK Archer is a series of routers from China's Universal Link TP-LINK. A security vulnerability exists in TP-Link Archer that stems from the presence of a certified Remote Code Execution RCE vulnerability...
CVE-2024-53375
An Authenticated Remote Code Execution RCE vulnerability affects the TP-Link Archer router series. A vulnerability exists in the "tmpgetsites" function of the HomeShield functionality provided by TP-Link. This vulnerability is still exploitable without the activation of the HomeShield functionali...
CVE-2024-53375
CVE-2024-53375 affects TP-Link Archer routers via HomeShield. An authenticated RCE exists in the tmp_get_sites function; the vulnerability is exploitable remotely without enabling HomeShield. The exploit path is through the /admin/smart_network?form=tmp_avira endpoint, where ownerId is passed to ...
CVE-2024-53623
Incorrect access control in the component l00.xml of TP-Link ARCHER-C7 v5 allows attackers to access sensitive information...