Lucene search
+L

4976 matches found

The Hacker News
The Hacker News
added 2023/06/21 5:36 a.m.72 views

New Condi Malware Hijacking TP-Link Wi-Fi Routers for DDoS Botnet Attacks

A new malware called Condi has been observed exploiting a security vulnerability in TP-Link Archer AX21 AX1800 Wi-Fi routers to rope the devices into a distributed denial-of-service DDoS botnet. Fortinet FortiGuard Labs said the campaign has ramped up since the end of May 2023. Condi is the work ...

8.8CVSS10AI score0.99999EPSS
SaveExploits7
Positive Technologies
Positive Technologies
added 2023/06/21 12:0 a.m.8 views

PT-2023-3421 · Tp Link · Tp-Link Tl-Wr941Nd +3

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR940N versions V2 through V4 TP-Link TL-WR941ND versions V5 through V6 TP-Link TL-WR743ND version V1 TP-Link TL-WR841N version V8 Description: The issue is related to a buffer overflow in the /userRpm/AccessCtrlAccessTargetsRpm...

7.7CVSS7AI score0.00704EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2023/06/20 12:0 a.m.8 views

PT-2023-3453 · Tp Link · Tp-Link Tl-Wr941Nd +2

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR940N versions V2 through V4 TP-Link TL-WR841N versions V8 through V10 TP-Link TL-WR941ND versions V5 through V6 Description: A buffer overflow was discovered in the /userRpm/QoSRuleListRpm component of TP-Link routers, allowing...

7.5CVSS7.2AI score0.00815EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2023/06/20 12:0 a.m.11 views

PT-2023-3441 · Tp Link · Tp-Link Tl-Wr940N

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR940N version V4 Description: The issue is related to a buffer overflow in the WanDynamicIpV6CfgRpm component when handling the ipStart parameter. This can be exploited by sending a specially crafted GET request to the...

9.9CVSS9.4AI score0.31733EPSS
SaveExploits4References7
Positive Technologies
Positive Technologies
added 2023/06/20 12:0 a.m.17 views

PT-2023-3454 · Tp Link · Tp-Link Tl-Wr941Nd +3

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR940N versions V2, V3, V4 TP-Link TL-WR841N versions V8, V10 TP-Link TL-WR740N versions V1, V2 TP-Link TL-WR941ND versions V5, V6 Description: A buffer overflow was discovered in the /userRpm/AccessCtrlTimeSchedRpm component of...

7.5CVSS7.5AI score0.00815EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2023/06/20 12:0 a.m.12 views

PT-2023-5454 · Tp Link · Tp-Link Archer C20

Name of the Vulnerable Software and Affected Versions: TP-Link Archer C20 versions prior to Archer C20JP V1 230616 Description: The issue is related to improper authentication in the TP-Link Archer C20 firmware, which can be exploited by a network-adjacent unauthenticated attacker to execute...

8.8CVSS8.9AI score0.00357EPSS
SaveExploits0References9
zdt
zdt
added 2023/06/17 12:0 a.m.349 views

TP-Link Archer AX10(EU)_V1.2_230220 Buffer Overflow Vulnerability

Exploit Title: Buffer Overflow in TP-Link Archer AX10EUV1.2230220 Exploit Author: Giuseppe Compare CVE: CVE-2023-34832 Vendor Homepage: https://www.tp-link.com/ Version: TP-Link Archer AX10EUV1.2230220 Buffer Overflow There is a buffer overflow in the FUN131e8 function due to using sprintf...

9.8CVSS7.1AI score0.0136EPSS
SaveExploits2
OSV
OSV
added 2023/06/16 6:15 p.m.9 views

CVE-2023-34832

TP-Link Archer AX10EUV1.2230220 was discovered to contain a buffer overflow via the function FUN131e8 - 0x132B4...

9.8CVSS6.1AI score0.0136EPSS
SaveExploits2References4
NVD
NVD
added 2023/06/16 6:15 p.m.28 views

CVE-2023-34832

TP-Link Archer AX10EUV1.2230220 was discovered to contain a buffer overflow via the function FUN131e8 - 0x132B4...

9.8CVSS9.8AI score0.0136EPSS
SaveExploits2References2
Prion
Prion
added 2023/06/16 6:15 p.m.23 views

Buffer overflow

TP-Link Archer AX10EUV1.2230220 was discovered to contain a buffer overflow via the function FUN131e8 - 0x132B4...

7.5CVSS9.8AI score0.0136EPSS
SaveExploits2References4Affected Software1
Vulnrichment
Vulnrichment
added 2023/06/16 12:0 a.m.36 views

CVE-2023-34832

TP-Link Archer AX10EUV1.2230220 was discovered to contain a buffer overflow via the function FUN131e8 - 0x132B4...

7.8AI score0.0136EPSS
SaveExploits2References2
CVE
CVE
added 2023/06/16 12:0 a.m.80 views

CVE-2023-34832

CVE-2023-34832 affects the TP-Link Archer AX10(EU)_V1.2_230220 router. The root cause is a buffer overflow in the function FUN_131e8 - 0x132B4 caused by improper usage of sprintf, leading to potential memory corruption. The issue is rated with a high impact (NVD CVSS v3.1 base score 9.8, CRITICAL...

9.8CVSS9.7AI score0.0136EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
added 2023/06/16 12:0 a.m.37 views

CVE-2023-34832

TP-Link Archer AX10EUV1.2230220 was discovered to contain a buffer overflow via the function FUN131e8 - 0x132B4...

10AI score0.0136EPSS
SaveExploits2References2
BDU FSTEC
BDU FSTEC
added 2023/06/16 12:0 a.m.13 views

The vulnerability of the WlanMacFilterRpm component (/userRpm/WlanMacFilterRpm.htm) of the TP-Link routers TL-WR940N, TL-WR841N, and TL-WR740N allows a malicious actor to gain unauthorized access to protected information or cause service failures.

The vulnerability of the WlanMacFilterRpm component /userRpm/WlanMacFilterRpm.htm of the TP-Link TL-WR940N, TL-WR841N, and TL-WR740N routers is related to the copying of buffers without checking the size of input data when processing the Mac key parameter. Exploiting this vulnerability can allow ...

8.6CVSS7.4AI score0.00903EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2023/06/16 12:0 a.m.9 views

The vulnerability of the FixMapCfgRpm component (/userRpm/FixMapCfgRpm.htm) in the microprogramming software for TP-Link routers such as TL-WR940N, TL-WR841N, and TL-WR740N allows a hacker to gain unauthorized access to protected information or cause service failures.

The vulnerability of the FixMapCfgRpm component /userRpm/FixMapCfgRpm.htm of the TP-Link routers TL-WR940N, TL-WR841N, and TL-WR740N lies in the copying of buffers without checking the size of the input data during the processing of the Changed parameter. Exploiting this vulnerability can allow a...

8.6CVSS7.4AI score0.00903EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2023/06/16 12:0 a.m.9 views

The vulnerability of the AES encryption algorithm implementation in TP-Link Tapo C200 IP cameras’ microprogramming software allows a intruder to gain unauthorized access to protected information.

The vulnerability of the AES encryption algorithm implemented in TP-Link Tapo C200 IP cameras relates to the repetition of character sequences in the encrypted text due to incorrect processing of the initialization vector. Exploiting this vulnerability can allow an intruder to gain unauthorized...

5.3CVSS5.5AI score0.0035EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2023/06/16 12:0 a.m.9 views

The vulnerability of the WlanNetworkRpm component (/userRpm/WlanNetworkRpm.htm) in the software of TP-Link routers such as TL-WR940N, TL-WR740N, and TL-WR841N allows a hacker to execute arbitrary commands or cause service failures.

The vulnerability of the WlanNetworkRpm component /userRpm/WlanNetworkRpm.htm of TP-Link routers such as TL-WR940N, TL-WR740N, and TL-WR841N is related to the failure to eliminate special elements used in the operating system’s processing of the ssid1 parameter. Exploiting this vulnerability allo...

8.6CVSS8.3AI score0.41874EPSS
SaveExploits3References3
NVD
NVD
added 2023/06/13 8:15 p.m.28 views

CVE-2023-29562

TP-Link TL-WPA7510 EUV2190125 was discovered to contain a stack overflow via the operation parameter at /admin/locale...

9.8CVSS9.7AI score0.00928EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2023/06/13 8:15 p.m.1 views

CVE-2023-29562

TP-Link TL-WPA7510 EUV2190125 was discovered to contain a stack overflow via the operation parameter at /admin/locale...

9.8CVSS7.2AI score0.00928EPSS
SaveExploits1References2
OSV
OSV
added 2023/06/13 8:15 p.m.7 views

CVE-2023-29562

TP-Link TL-WPA7510 EUV2190125 was discovered to contain a stack overflow via the operation parameter at /admin/locale...

9.8CVSS7.3AI score0.00928EPSS
SaveExploits1References1
Rows per page
Query Builder