TP-LINK RE365 安全漏洞

RE365 is a WiFi range extender from China's TP-LINK. A buffer overflow vulnerability exists in the RE365 V1180213 version of TP-LINK Technologies Ltd. The vulnerability stems from the lack of length validation of the /usr/bin/httpd.USERAGENT field, which can be exploited by an attacker to cause a...

The vulnerability of the microprogramming software of TP-Link TL-SG1016DE switches stems from the lack of measures taken to protect the website structure. This allows attackers to perform cross-site scripting attacks.

The vulnerability of TP-Link TL-SG1016DE switch’s microprogramming software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

VulnCheck KEV: CVE-2022-25064

TP-LINK TL-WR840NESV6.20180709 was discovered to contain a remote code execution RCE vulnerability via the function oalwan6setIpAddr...

The vulnerability of the microprogrammed software of TP-Link Wi-Fi routers such as Archer AX3000, Archer AXE75, Archer AX5400, Archer Air R5, and Archer AXE5400 exists due to the failure to address the issue of eliminating specific components used in the operating system. This vulnerability allows a perpetrator to execute arbitrary commands.

The vulnerability of TP-Link Wi-Fi routers such as Archer AX3000, Archer AXE75, Archer AX5400, Archer Air R5, and Archer AXE5400 exists due to the lack of measures taken to neutralize specific components used in the operating system. Exploiting this vulnerability allows a remote attacker to execu...

TP-LINK Tapo C210 Stack Buffer Overflow Vulnerability

TP-LINK Tapo C210 is a webcam device from China P&L TP-LINK. The TP-LINK Tapo C210 suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code on an affected device...

The vulnerability of the mechanism for transmitting information about ICMP Redirects for TP-LINK TL-7DR5130 wireless router microprogramming systems allows a hacker to intercept traffic.

The vulnerability of the mechanism for transmitting information about ICMP Redirect for TP-LINK TL-7DR5130 wireless router microprogramming systems is related to insufficient verification of the source of the communication channel. Exploiting this vulnerability allows a malicious actor to interce...

The vulnerability of TP-LINK’s TL-7DR5130 wireless router’s microprogramming software lies in insufficient checks on the source of the communication channel. This allows attackers to execute the TCP Reset attack.

The vulnerability of TP-LINK’s TL-7DR5130 wireless router microprogramming software is related to insufficient verification of the communication channel source. Exploiting this vulnerability allows a remote attacker to execute a TCP Reset attack by sending specially crafted RST messages to a remo...

UBUNTU-CVE-2022-48830

In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix potential CAN frame reception race in isotprcv When receiving a CAN frame the current code logic does not consider concurrently receiving processes which do not show up in real world usage. Ziyang Xuan writes: The...

CVE-2024-4224

An authenticated stored cross-site scripting XSS exists in the TP-Link TL-SG1016DE affecting version TL-SG1016DEUN V7.61.0.0 Build 20230616, which could allow an adversary to run JavaScript in an administrator's browser. This issue was fixed in TL-SG1016DEUN V71.0.1 Build 20240628...

CVE-2024-4224 TP-Link TL-SG1016DE XSS

An authenticated stored cross-site scripting XSS exists in the TP-Link TL-SG1016DE affecting version TL-SG1016DEUN V7.61.0.0 Build 20230616, which could allow an adversary to run JavaScript in an administrator's browser. This issue was fixed in TL-SG1016DEUN V71.0.1 Build 20240628...

CVE-2024-4224

TP-Link TL-SG1016DE exposes an authenticated stored XSS in firmware TL-SG1016DE(UN) v7.6_1.0.0 Build 20230616, enabling an attacker with credentials to execute JavaScript in an administrator’s browser. Root cause described as insufficient client-side/web-page protection enabling XSS. Impact is li...

CVE-2024-4224 TP-Link TL-SG1016DE XSS

An authenticated stored cross-site scripting XSS exists in the TP-Link TL-SG1016DE affecting version TL-SG1016DEUN V7.61.0.0 Build 20230616, which could allow an adversary to run JavaScript in an administrator's browser. This issue was fixed in TL-SG1016DEUN V71.0.1 Build 20240628...

PT-2024-5357 · Tp Link · Tp-Link Tl-Sg1016De

Name of the Vulnerable Software and Affected Versions: TP-Link TL-SG1016DE version TL-SG1016DEUN V7.6 1.0.0 Build 20230616 Description: The issue is related to an authenticated stored cross-site scripting XSS that could allow an adversary to run JavaScript in an administrator's browser. This is d...

TP-LINK AX1800 Competitive Conditions Vulnerability

The TP-LINK AX1800 is a dual-band Wi-Fi 6 router from China P&L TP-LINK. The TP-LINK AX1800 suffers from a contention condition vulnerability that can be exploited by an attacker to access resources available on the LAN interface and execute arbitrary code...

CVE-2024-38471

CVE-2024-38471 concerns multiple TP-LINK routers (e.g., Archer AX3000, AXE75, AX5400, Air R5, AXE5400) with an OS command injection vulnerability. The issue allows a network-adjacent attacker who has administrative privileges to execute arbitrary OS commands by restoring a crafted backup file. Th...

CVE-2024-38471

Multiple TP-LINK products allow a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by restoring a crafted backup file. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi...

Multiple TP-Link products vulnerable to OS command injection

Overview Multiple products provided by TP-LINK contains an OS command injection vulnerability CWE-78 related to the backup/restore function. Chuya Hayakawa of 00One, Inc. reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact A user who logs in to the affected...

TP-LINK ER7206 Command Execution Vulnerability

The TP-LINK ER7206 is a multi-function Gigabit router from China P&L TP-LINK. A command execution vulnerability exists in the TP-Link ER7206 Omada Gigabit VPN Router version 1.4.1 Build 20240117, which stems from the presence of residual debugging code that can be exploited by an attacker to caus...

TP-Link Archer AX3000 Security Vulnerability

TP-LINK Archer AX3000 is a wireless router from China P&L TP-LINK. A security vulnerability exists in the TP-Link Archer AX3000, which stems from the presence of an operating system command injection vulnerability that allows an attacker to execute arbitrary operating system commands by restoring...

PT-2024-5005 · Tp Link · Tp-Link Archer Ax3000 +3

Name of the Vulnerable Software and Affected Versions: TP-LINK products affected versions not specified TP-Link Archer AX3000 TP-Link Archer AXE75 TP-Link Archer AX5400 TP-Link Archer Air R5 TP-Link Archer AXE5400 Description: The issue allows a network-adjacent attacker with administrative...