The vulnerability of the httpProcDataSrv() function in TP-Link TL-WDR5620 router software allows a hacker to execute arbitrary code.

The vulnerability of the httpProcDataSrv function in TP-Link TL-WDR5620 router software exists because measures to neutralize the special elements used in the operating system commands have not been taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2024-10523

This vulnerability exists in TP-Link IoT Smart Hub due to storage of Wi-Fi credentials in plain text within the device firmware. An attacker with physical access could exploit this by extracting the firmware and analyzing the binary data to obtain the Wi-Fi credentials stored on the vulnerable...

CVE-2024-10523

This vulnerability exists in TP-Link IoT Smart Hub due to storage of Wi-Fi credentials in plain text within the device firmware. An attacker with physical access could exploit this by extracting the firmware and analyzing the binary data to obtain the Wi-Fi credentials stored on the vulnerable...

CVE-2024-10523 Information Disclosure Vulnerability in TP-Link IoT Smart Hub

This vulnerability exists in TP-Link IoT Smart Hub due to storage of Wi-Fi credentials in plain text within the device firmware. An attacker with physical access could exploit this by extracting the firmware and analyzing the binary data to obtain the Wi-Fi credentials stored on the vulnerable...

CVE-2024-10523

CVE-2024-10523 affects TP-Link IoT Smart Hub. Root cause: storage of Wi‑Fi credentials in plaintext in the device firmware, enabling credential extraction by analyzing the firmware if an attacker has physical access. Impact: disclosure of Wi‑Fi credentials stored on the vulnerable device. Exploit...

CVE-2024-10523 Information Disclosure Vulnerability in TP-Link IoT Smart Hub

This vulnerability exists in TP-Link IoT Smart Hub due to storage of Wi-Fi credentials in plain text within the device firmware. An attacker with physical access could exploit this by extracting the firmware and analyzing the binary data to obtain the Wi-Fi credentials stored on the vulnerable...

PT-2024-16342 · Tp Link · Tp-Link Iot Smart Hub

Name of the Vulnerable Software and Affected Versions: TP-Link IoT Smart Hub affected versions not specified Description: The issue exists due to the storage of Wi-Fi credentials in plain text within the device firmware. An attacker with physical access could exploit this by extracting the firmwa...

CVE-2024-22733

TP Link MR200 V4 Firmware version 210201 was discovered to contain a null-pointer-dereference in the web administration panel on /cgi/login via the sign, Action or LoginStatus query parameters which could lead to a denial of service by a local or remote unauthenticated attacker...

CVE-2024-22733

TP Link MR200 V4 Firmware version 210201 was discovered to contain a null-pointer-dereference in the web administration panel on /cgi/login via the sign, Action or LoginStatus query parameters which could lead to a denial of service by a local or remote unauthenticated attacker...

TP-LINK MR200 安全漏洞

TP-LINK MR200 is a wireless router from China P&L TP-LINK. A security vulnerability exists in TP-LINK MR200 version 210201, which stems from a null pointer dereference in a query parameter, which could lead to a denial of service by a local or remote unauthenticated attacker...

CVE-2024-22733

TP Link MR200 V4 Firmware version 210201 was discovered to contain a null-pointer-dereference in the web administration panel on /cgi/login via the sign, Action or LoginStatus query parameters which could lead to a denial of service by a local or remote unauthenticated attacker...

CVE-2024-22733

TP-Link MR200 V4 firmware 210201 is affected by a null-pointer-dereference in the web administration panel at /cgi/login via the sign, Action, or LoginStatus parameters, leading to denial of service by unauthenticated remote/local attackers. The issue affects the web login handler and is document...

CVE-2024-22733

TP Link MR200 V4 Firmware version 210201 was discovered to contain a null-pointer-dereference in the web administration panel on /cgi/login via the sign, Action or LoginStatus query parameters which could lead to a denial of service by a local or remote unauthenticated attacker...

The vulnerability of the PopupSiteSurveyRpm component (/userRpm/popupSiteSurveyRpm.htm) in the TP-Link TL-WR740N router software allows a hacker to execute arbitrary code.

The vulnerability of TP-Link TL-WR740N router’s microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially crafted POST request...

The vulnerability of the wacWhitelistJsonToBin() function in TP-Link TL-WDR7660 router software allows a hacker to trigger a service failure.

The vulnerability of the wacWhitelistJsonToBin function in the microprogramming software for TP-Link TL-WDR7660 routers stems from the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to trigger a...

The vulnerability of the rtRuleJsonToBin() function in TP-Link TL-WDR7660 router software allows a hacker to induce a service failure.

The vulnerability of the rtRuleJsonToBin function in TP-Link TL-WDR7660 router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker, operating remotely, to trigger a service failure through a specially crafted HTT...

The vulnerability of the guestRuleJsonToBin() function in TP-Link TL-WDR7660 router software allows a hacker to trigger a service failure.

The vulnerability of the guestRuleJsonToBin function in TP-Link TL-WDR7660 router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to trigger a service failure through a specially crafted HTTP request...

Routers

Make: TP-Link Model: TL-WR841N V14 This vulnerability is abo...

The vulnerability of TP-Link WR941ND router’s microprogramming software, related to the execution of operations outside the buffer in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of TP-Link WR941ND router’s microprogramming software lies in the fact that the operation exceeds the buffer limits in memory when processing the page /userRpm/popupSiteSurveyRpm.htm with the parameter ssid. Exploiting this vulnerability allows a remote attacker to compromise th...

TP-LINK TL-WDR7660 wacWhitelistJsonToBin Function Buffer Overflow Vulnerability

The TP-LINK TL-WDR7660 is a Gigabit router from China P&L TP-LINK. A buffer overflow vulnerability exists in the TP-LINK TL-WDR7660 version 1.0, which originates from the wacWhitelistJsonToBin function not checking the parameter string name when handling it, and can be exploited by a remote...