Lucene search
+L

4978 matches found

CNNVD
CNNVD
added 2024/06/17 12:0 a.m.7 views

TP-LINK TL-7DR5130 安全漏洞

The TP-Link TL-7DR5130 is a wireless router from China P&L TP-LINK. The TP-Link TL-7DR5130 suffers from a security bypass vulnerability that can be exploited by an attacker to hijack traffic between the victim and any remote server by sending a spoofed ICMP redirect message...

6.3CVSS6.8AI score0.00283EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/06/17 12:0 a.m.47 views

CVE-2024-37662

TP-LINK TL-7DR5130 v1.0.23 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same WLAN as the victim can disconnect or hijack the traffic between the victim and any remote server by sending out forged TCP RST messages to evict NAT mappings in the router...

0.0038EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2024/06/17 12:0 a.m.11 views

The vulnerability of the /usr/bin/pppd component of the TP-Link Omada ER605 VPN router’s microprogramming software allows a malicious actor to execute arbitrary code under the root user context.

The vulnerability of the /usr/bin/pppd component of the TP-Link Omada ER605 VPN router software exists due to the lack of measures taken to neutralize specific elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to execute arbitrary code under the...

7.5CVSS7.7AI score0.0071EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/06/10 12:0 a.m.7 views

PT-2024-4791 · Tp Link · Tp-Link Tl-7Dr5130

Name of the Vulnerable Software and Affected Versions: TP-LINK TL-7DR5130 version 1.0.23 Description: The issue is related to the mechanism of transmitting routing information to hosts via ICMP Redirect in the TP-LINK TL-7DR5130 wireless router's firmware. It is associated with insufficient...

6.7CVSS7AI score0.00283EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2024/06/07 12:0 a.m.12 views

The vulnerability of TP-Link Omada er605’s microprogramming software arises from incorrect processing of DDNS error codes, allowing a intruder to execute any arbitrary code in the root context.

The vulnerability of TP-Link Omada er605 microprogramming software is caused by incorrect processing of DDNS error codes. Exploiting this vulnerability allows a remote attacker to execute any code within the root context...

7.5CVSS7.4AI score0.00785EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2024/06/07 12:0 a.m.12 views

The vulnerability of the executable file cmxddns in the microprogramming software of TP-Link Omada er605 allows a hacker to execute arbitrary code in the root context.

The vulnerability of the executable file cmxddnsd of the TP-Link Omada er605 microcontroller software is related to the use of weak security mechanisms. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the root context...

5CVSS6.6AI score0.00341EPSS
SaveExploits1References4
The Hacker News
The Hacker News
added 2024/05/30 2:24 p.m.48 views

RedTail Crypto-Mining Malware Exploiting Palo Alto Networks Firewall Vulnerability

The threat actors behind the RedTail cryptocurrency mining malware have added a recently disclosed security flaw impacting Palo Alto Networks firewalls to its exploit arsenal. The addition of the PAN-OS vulnerability to its toolkit has been complemented by updates to the malware, which now...

10CVSS10AI score0.99999EPSS
SaveExploits464
NVD
NVD
added 2024/05/28 8:16 p.m.11 views

CVE-2023-30307

An issue discovered in TP-LINK TL-R473GP-AC, TP-LINK XDR6020, TP-LINK TL-R479GP-AC, TP-LINK TL-R4239G, TP-LINK TL-WAR1200L, and TP-LINK TL-R476G routers allows attackers to hijack TCP sessions which could lead to a denial of service...

5.3CVSS6.5AI score0.00358EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/05/28 7:28 p.m.9 views

CVE-2023-30307

An issue discovered in TP-LINK TL-R473GP-AC, TP-LINK XDR6020, TP-LINK TL-R479GP-AC, TP-LINK TL-R4239G, TP-LINK TL-WAR1200L, and TP-LINK TL-R476G routers allows attackers to hijack TCP sessions which could lead to a denial of service...

6.8AI score0.00358EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/05/28 7:28 p.m.14 views

CVE-2023-30307

An issue discovered in TP-LINK TL-R473GP-AC, TP-LINK XDR6020, TP-LINK TL-R479GP-AC, TP-LINK TL-R4239G, TP-LINK TL-WAR1200L, and TP-LINK TL-R476G routers allows attackers to hijack TCP sessions which could lead to a denial of service...

6.5AI score0.00358EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2024/05/28 5:11 a.m.20 views

TP-Link Gaming Router Vulnerability Exposes Users to Remote Code Attacks

A maximum-severity security flaw has been disclosed in the TP-Link Archer C5400X gaming router that could lead to remote code execution on susceptible devices by sending specially crafted requests. The vulnerability, tracked as CVE-2024-5035, carries a CVSS score of 10.0. It impacts all versions ...

9.8CVSS8.5AI score0.12164EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2024/05/28 12:0 a.m.6 views

PT-2024-12227 · Tp Link · Tp-Link Tl-War1200L +5

Name of the Vulnerable Software and Affected Versions: TP-LINK TL-R473GP-AC TP-LINK XDR6020 TP-LINK TL-R479GP-AC TP-LINK TL-R4239G TP-LINK TL-WAR1200L TP-LINK TL-R476G Description: An issue in the listed TP-LINK routers allows attackers to hijack TCP sessions, potentially leading to a denial of...

5.3CVSS7.2AI score0.00358EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/05/28 12:0 a.m.2 views

多款TP-LINK产品 安全漏洞

The TP-LINK TL-R473GP-AC is an all-in-one Gigabit VPN router from China P&L TP-LINK. A security vulnerability exists in multiple TP-LINK products, which stems from a vulnerability that allows an attacker to hijack TCP sessions, potentially resulting in a denial-of-service attack. The following...

5.3CVSS6.8AI score0.00358EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/05/27 7:22 a.m.39 views

CVE-2024-5035 TP-Link Archer C5400X - RFTest Unauthenticated Command Injection

The affected device expose a network service called "rftest" that is vulnerable to unauthenticated command injection on ports TCP/8888, TCP/8889, and TCP/8890. By successfully exploiting this flaw, remote unauthenticated attacker can gain arbitrary command execution on the device with elevated...

8.8CVSS7.6AI score0.03244EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/05/27 7:22 a.m.25 views

CVE-2024-5035 TP-Link Archer C5400X - RFTest Unauthenticated Command Injection

The affected device expose a network service called "rftest" that is vulnerable to unauthenticated command injection on ports TCP/8888, TCP/8889, and TCP/8890. By successfully exploiting this flaw, remote unauthenticated attacker can gain arbitrary command execution on the device with elevated...

8.8CVSS7.9AI score0.03244EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/05/27 12:0 a.m.4 views

TP-LINK Archer C4500X 安全漏洞

The TP-LINK Archer C4500X is a wireless router from China P&L TP-LINK. A security vulnerability exists in the TP-LINK Archer C4500X that stems from the rftest web service being vulnerable to unauthenticated command injection on ports TCP/8888, TCP/8889, and TCP/8890, which can be exploited by a...

8.8CVSS8.4AI score0.03244EPSS
SaveExploits0References3
NVD
NVD
added 2024/05/23 10:15 p.m.22 views

CVE-2024-5243

TP-Link Omada ER605 Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Omada ER605 routers. Authentication is not required to exploit this vulnerability. However, devices are...

7.5CVSS8AI score0.00808EPSS
SaveExploits1References1
NVD
NVD
added 2024/05/23 10:15 p.m.23 views

CVE-2024-5242

TP-Link Omada ER605 Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Omada ER605 routers. Authentication is not required to exploit this vulnerability. However,...

7.5CVSS8AI score0.00785EPSS
SaveExploits1References1
NVD
NVD
added 2024/05/23 10:15 p.m.32 views

CVE-2024-5244

TP-Link Omada ER605 Reliance on Security Through Obscurity Vulnerability. This vulnerability allows network-adjacent attackers to access or spoof DDNS messages on affected installations of TP-Link Omada ER605 routers. Authentication is not required to exploit this vulnerability. However, devices...

5CVSS5.4AI score0.00341EPSS
SaveExploits1References1
NVD
NVD
added 2024/05/23 10:15 p.m.26 views

CVE-2024-5228

TP-Link Omada ER605 Comexe DDNS Response Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Omada ER605 routers. Authentication is not required to exploit this...

7.5CVSS8AI score0.00513EPSS
SaveExploits0References1
Rows per page
Query Builder