CVE-2023-36359

TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR940N V2/V3 and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component /userRpm/QoSRuleListRpm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted GET request...

CVE-2023-36358

CVE-2023-36358 affects TP-Link router models TL-WR940N (V2/V3/V4), TL-WR941ND (V5/V6), TL-WR743ND (V1), and TL-WR841N (V8). The issue is a buffer overflow in the component /userRpm/AccessCtrlAccessTargetsRpm that can cause a Denial of Service (DoS) via a crafted GET request. The information consi...

CVE-2023-36357

CVE-2023-36357 affects TP-Link TL-WR940N (V2/V4/V6), TL-WR841N (V8/V10), and TL-WR941ND (V5) in the LocalManageControlRpm component. The issue is described as a DoS triggered by a crafted GET request, caused by errors in resource release. Impact is Denial of Service on affected devices; no broade...

CVE-2023-36356

CVE-2023-36356 affects TP-Link TL-WR940N (V2/V4/V6), TL-WR841N (V8), TL-WR941ND (V5) and TL-WR740N (V1/V2). The issue is a buffer read out-of-bounds in the /userRpm/VirtualServerRpm endpoint, allowing a crafted GET request to trigger a Denial of Service. Public documents confirm the vulnerable co...

CVE-2023-36354

The CVE-2023-36354 entry concerns TP-Link TL-WR940N (V4; also V2/V3), TL-WR841N (V8/V10), TL-WR740N (V1/V2), and TL-WR941ND (V5/V6), with a buffer overflow in the /userRpm/AccessCtrlTimeSchedRpm component that enables a Denial of Service via a crafted GET request. The connected sources corroborat...

CVE-2023-36359

CVE-2023-36359 affects TP-Link TL-WR940N (V4), TL-WR841N (V8/V10), TL-WR940N (V2/V3) and TL-WR941ND (V5/V6). The root cause is a buffer overflow in the /userRpm/QoSRuleListRpm component, enabling a Denial of Service via a crafted GET request. Public references consistently describe a DoS impact w...

CVE-2023-36355

Summary: CVE-2023-36355 affects the TP-Link TL-WR940N v4 router, via a buffer overflow in the WanDynamicIpV6CfgRpm endpoint when processing the ipStart parameter at /userRpm/WanDynamicIpV6CfgRpm, leading to a DoS. Public exploit/ PoC material exists (exploits reference the same endpoint with ipSt...

PT-2023-3653 · Tp Link · Tp-Link Tl-Wr941Nd +2

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR940N versions V2 through V6 TP-Link TL-WR841N versions V8 through V10 TP-Link TL-WR941ND version V5 Description: The issue is related to errors in resource release, allowing a remote attacker to cause a Denial of Service DoS usin...

部分TP-LINK产品 安全漏洞

The TP-LINK TL-WR940N, among others, is a wireless router from China P&L TP-LINK. A security vulnerability exists in TP-Link Wireless Routers that stems from a buffer overflow vulnerability contained in the component AccessCtrlTimeSchedRPM. An attacker could exploit this vulnerability to cause a...

CVE-2023-36355

TP-Link TL-WR940N V4 was discovered to contain a buffer overflow via the ipStart parameter at /userRpm/WanDynamicIpV6CfgRpm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted GET request...

CVE-2023-36356

TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8, TL-WR941ND V5, and TL-WR740N V1/V2 were discovered to contain a buffer read out-of-bounds via the component /userRpm/VirtualServerRpm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted GET request...

CVE-2023-36358

TP-Link TL-WR940N V2/V3/V4, TL-WR941ND V5/V6, TL-WR743ND V1 and TL-WR841N V8 were discovered to contain a buffer overflow in the component /userRpm/AccessCtrlAccessTargetsRpm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted GET request...

TP-Link TL-WR940N 安全漏洞

The TP-LINK TL-WR940N is a wireless router from China P&L TP-LINK. A security vulnerability exists in the TP-Link TL-WR940N V4 version, which stems from the parameter ipStart contains a buffer overflow vulnerability. An attacker exploits this vulnerability to cause a denial of service DoS by...

TP-LINK TL-WR940N 安全漏洞

The TP-LINK TL-WR940N is a wireless router from China P&L TP-LINK. The TP-LINK TL-WR940N suffers from a security vulnerability that originates from a security issue in the component LocalManageControlRpm. An attacker could exploit the vulnerability to cause a denial of service DoS by constructing...

TP-LINK TL-WR940N 安全漏洞

The TP-LINK TL-WR940N is a wireless router from China P&L TP-LINK. The TP-LINK TL-WR940N suffers from a security vulnerability that originates from a buffer overflow vulnerability contained in the component AccessCtrlAccessTargetsRPM. An attacker could exploit this vulnerability to cause a denial...

CVE-2023-36355

TP-Link TL-WR940N V4 was discovered to contain a buffer overflow via the ipStart parameter at /userRpm/WanDynamicIpV6CfgRpm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted GET request...

CVE-2023-36359

TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR940N V2/V3 and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component /userRpm/QoSRuleListRpm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted GET request...

TP-LINK TL-WR940N 安全漏洞

The TP-LINK TL-WR940N is a wireless router from China P&L TP-LINK. The TP-LINK TL-WR940N suffers from a security vulnerability that originates from a buffer overflow vulnerability contained in the component QoSRuleListRPM. An attacker could exploit the vulnerability to cause a denial of service D...

New DDoS Botnet ‘Condi’ Targets Vulnerable TP-Link AX21 Routers

By Deeba Ahmed FortiGuard Labs has identified numerous Condi DDoS botnet samples that exploit other known security flaws, putting unpatched software at a higher risk of being exploited by botnet malware. This is a post from HackRead.com Read the original post: New DDoS Botnet Condi Targets...

New Condi Malware Hijacking TP-Link Wi-Fi Routers for DDoS Botnet Attacks

A new malware called Condi has been observed exploiting a security vulnerability in TP-Link Archer AX21 AX1800 Wi-Fi routers to rope the devices into a distributed denial-of-service DDoS botnet. Fortinet FortiGuard Labs said the campaign has ramped up since the end of May 2023. Condi is the work ...