4976 matches found
CVE-2024-21773
Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product from the LAN port or Wi-Fi to execute arbitrary OS commands on the product that has pre-specified target devices and blocked URLs in parental control settings...
CVE-2024-21821
Multiple TP-LINK products allow a network-adjacent authenticated attacker with access to the product from the LAN port or Wi-Fi to execute arbitrary OS commands...
CVE-2024-21773
Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product from the LAN port or Wi-Fi to execute arbitrary OS commands on the product that has pre-specified target devices and blocked URLs in parental control settings...
CVE-2024-21821
Multiple TP-LINK products allow a network-adjacent authenticated attacker with access to the product from the LAN port or Wi-Fi to execute arbitrary OS commands...
Design/Logic Flaw
Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product to execute arbitrary OS commands. Affected products/versions are as follows: Archer AX3000 firmware versions prior to "Archer AX3000JPV11.1.2 Build 20231115", Archer AX5400 firmware versions pri...
Design/Logic Flaw
Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product to execute arbitrary OS commands. Affected products/versions are as follows: Archer AX3000 firmware versions prior to "Archer AX3000JPV11.1.2 Build 20231115", Archer AX5400 firmware versions pri...
Design/Logic Flaw
Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer AX3000 firmware versions prior to "Archer AX3000JPV11.1.2 Build 20231115", Archer AX5400 firmware versions prior to "Archer AX5400JPV11.1.2...
PT-2024-7994 · Tp Link · Tp-Link Mr200
Name of the Vulnerable Software and Affected Versions: TP-Link MR200 version 210201 Description: The issue is related to a null-pointer-dereference problem in the web administration panel of the TP-Link MR200. This problem occurs on the "/cgi/login" endpoint via the sign, Action, or LoginStatus...
CVE-2024-21833
Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product to execute arbitrary OS commands. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi...
CVE-2024-21833
Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product to execute arbitrary OS commands. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi...
CVE-2024-21833
CVE-2024-21833 affects TP-Link routers including Archer AX3000, Archer AX5400, Archer AXE75, Deco X50, and Deco XE200 (JP variants). The issue is an OS command injection vulnerability exploitable by a network-adjacent unauthenticated attacker who can access the device from LAN or Wi‑Fi. Affected ...
CVE-2024-21821
Multiple TP-LINK products allow a network-adjacent authenticated attacker with access to the product from the LAN port or Wi-Fi to execute arbitrary OS commands...
CVE-2024-21821
CVE-2024-21821 affects TP-LINK routers (e.g., Archer AX3000, AX5400, AXE75). A network-adjacent authenticated attacker with LAN/Wi‑Fi access can execute arbitrary OS commands due to inadequate input handling in the device OS. CVSS 3.1 base score 8.0 (ADJACENT, LOW{PR:L}, UI: NONE; impact C/I/A: H...
CVE-2024-21821
Multiple TP-LINK products allow a network-adjacent authenticated attacker with access to the product from the LAN port or Wi-Fi to execute arbitrary OS commands...
CVE-2024-21773
TP-LINK CVE-2024-21773 is an OS command injection affecting multiple TP-LINK devices. According to JVNDB, affected products include Archer AX3000 (JP) with firmware < 1.1.2 Build 20231115, Archer AX5400 (JP) < 1.1.2 Build 20231115, Deco X50 (JP) < 1.4.1 Build 20231122, and Deco XE200 (JP)
CVE-2024-21773
Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product from the LAN port or Wi-Fi to execute arbitrary OS commands on the product that has pre-specified target devices and blocked URLs in parental control settings...
CVE-2024-21773
Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product from the LAN port or Wi-Fi to execute arbitrary OS commands on the product that has pre-specified target devices and blocked URLs in parental control settings...
Multiple TP-Link products vulnerable to OS command injection
Overview Multiple products provided by TP-LINK contain multiple vulnerabilities listed below. OS command injection CWE-78 - CVE-2024-21773 OS command injection CWE-78 - CVE-2024-21821 OS command injection CWE-78 - CVE-2024-21833 Chuya Hayakawa of 00One, Inc. reported these vulnerabilities to...
PT-2024-19047 · Tp Link · Tp-Link
Name of the Vulnerable Software and Affected Versions: TP-LINK products affected versions not specified Description: The issue allows a network-adjacent unauthenticated attacker with access to the product from the LAN port or Wi-Fi to execute arbitrary OS commands on the product that has...