4975 matches found
CVE-2023-27078
A command injection issue was found in TP-Link MR3020 v.1150921 that allows a remote attacker to execute arbitrary commands via a crafted request to the tftp endpoint...
Command injection
A command injection issue was found in TP-Link MR3020 v.1150921 that allows a remote attacker to execute arbitrary commands via a crafted request to the tftp endpoint...
CVE-2023-27078
A command injection issue was found in TP-Link MR3020 v.1150921 that allows a remote attacker to execute arbitrary commands via a crafted request to the tftp endpoint...
PT-2023-1973 · Tp Link · Tp-Link Mr3020
Name of the Vulnerable Software and Affected Versions: TP-Link MR3020 version 1 150921 Description: A command injection issue allows a remote attacker to execute arbitrary commands via a crafted request to the "tftp endpoint". This issue is related to the lack of data cleaning measures at the...
CVE-2023-27078
CVE-2023-27078 affects TP-Link MR3020 v1_150921, where a vulnerability in the tftp endpoint allows remote command execution due to insufficient input validation. The root cause is a lack of data cleaning at the management level, enabling arbitrary commands to be run by an unauthenticated remote a...
CVE-2023-27078
A command injection issue was found in TP-Link MR3020 v.1150921 that allows a remote attacker to execute arbitrary commands via a crafted request to the tftp endpoint...
TP-Link T2600G-28SQ uses vulnerable SSH host keys
Overview TP-Link layer-2 switch T2600G-28SQ uses vulnerable SSH host keys CWE-1391. Kuniyuki Hasegawa of VeriServe Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact The credential information for a...
JVN#62420378: TP-Link T2600G-28SQ uses vulnerable SSH host keys
TP-Link layer-2 switch T2600G-28SQ uses vulnerable SSH host keys CWE-1391. Impact The credential information for an affected device may be obtained when the administrator is tricked to login to a device which spoofs the affected device. Solution Update the Firmware Update the firmware to the late...
TP-LINK T2600G-28SQ 安全漏洞
The TP-LINK T2600G-28SQ is a switch from China P&L TP-LINK. A security vulnerability exists in the TP-LINK T2600G-28SQ. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...
TP-Link Archer AX21 AX1800 Command Injection Vulnerability
TP-Link Archer AX21 AX1800 is a WIFI6 router from TP-Link.TP-Link Archer AX21 AX1800 suffers from a command injection vulnerability, which stems from unfiltered user input and can be exploited by attackers to construct malicious requests to execute arbitrary commands...
CVE-2023-1389
TP-Link Archer AX21 AX1800 firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability in the country form of the /cgi-bin/luci;stok=/locale endpoint on the web management interface. Specifically, the country parameter of the write operation was not sanitized before...
CVE-2023-1389
TP-Link Archer AX21 AX1800 firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability in the country form of the /cgi-bin/luci;stok=/locale endpoint on the web management interface. Specifically, the country parameter of the write operation was not sanitized before...
Command injection
TP-Link Archer AX21 AX1800 firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability in the country form of the /cgi-bin/luci;stok=/locale endpoint on the web management interface. Specifically, the country parameter of the write operation was not sanitized before...
PT-2023-3422 · Tp Link · Tp-Link Tapo C210
Name of the Vulnerable Software and Affected Versions: TP-Link Tapo C210 affected versions not specified Description: This issue allows network-adjacent attackers to bypass authentication on affected installations of TP-Link Tapo C210 IP cameras. The specific flaw exists within the password...
CVE-2023-1389
TP-Link Archer AX21 AX1800 firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability in the country form of the /cgi-bin/luci;stok=/locale endpoint on the web management interface. Specifically, the country parameter of the write operation was not sanitized before...
CVE-2023-1389
TP-Link Archer AX21 AX1800 firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability in the country form of the /cgi-bin/luci;stok=/locale endpoint on the web management interface. Specifically, the country parameter of the write operation was not sanitized before...
PT-2023-4660 · Tp Link · Tp-Link Tapo C210
Name of the Vulnerable Software and Affected Versions: TP-Link Tapo C210 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Tapo C210 IP cameras. Although authentication is required to exploit th...
CVE-2023-1389
TP-Link Archer AX21 AX1800 firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability in the country form of the /cgi-bin/luci;stok=/locale endpoint on the web management interface. Specifically, the country parameter of the write operation was not sanitized before...
TP-Link Archer AX21 tmpServer Command 0x422 Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer AX21 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of command 0x422 provided to the tmpServer service. The...
TP-Link Archer AX21 tdpServer Logging Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer AX21 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the logging functionality of the tdpServer program, which listens ...