CVE-2021-28857

CVE-2021-28857 affects TP-Link TL-WPA4220 devices running 4.0.2 Build 20180308 Rel.37064, where credentials (username and password) are transmitted via cookies. The information disclosure stems from cookies leaking credentials, enabling a potential attacker to obtain login data without exploitati...

CVE-2021-28858

CVE-2021-28858 affects TP-Link TL-WPA4220 (firmware 4.0.2 Build 20180308 Rel.37064). The vulnerability is an information-disclosure issue caused by not using SSL by default, enabling an attacker on the local network to monitor traffic and capture cookies and other sensitive information. The provi...

CVE-2021-28858

TP-Link's TL-WPA4220 4.0.2 Build 20180308 Rel.37064 does not use SSL by default. Attacker on the local network can monitor traffic and capture the cookie and other sensitive information...

TP-Link TL-WPA4220 信息泄露漏洞

Tp-link TP-Link TL-WPA4220 is a home wireless WiFi bridge that extends wireless signals from China's Tp-link. The device can transmit data at high speed over the line to extend the network to areas that are currently not covered. An information disclosure vulnerability exists in the TP-Link...

TP-Link TL-WPA4220 信息泄露漏洞

Tp-link TP-Link TL-WPA4220 is a home wireless WiFi bridge that extends wireless signals from China's Tp-link. The device can transmit data at high speed over the line to extend the network to areas that are currently not covered. The TP-Link TL-WPA4220 suffers from an information disclosure...

CVE-2021-31659

TP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is vulnerable to Cross Site Request Forgery CSRF. All configuration information is placed in the URL, without any additional token authentication information. A malicious link opened by the switch administrator may cause the passwo...

CVE-2021-31658

TP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is affected by an Array index error. The interface that provides the "device description" function only judges the length of the received data, and does not filter special characters. This vulnerability will cause the application t...

CVE-2021-31659

TP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is vulnerable to Cross Site Request Forgery CSRF. All configuration information is placed in the URL, without any additional token authentication information. A malicious link opened by the switch administrator may cause the passwo...

CVE-2021-31658

TP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is affected by an Array index error. The interface that provides the "device description" function only judges the length of the received data, and does not filter special characters. This vulnerability will cause the application t...

Design/Logic Flaw

TP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is affected by an Array index error. The interface that provides the "device description" function only judges the length of the received data, and does not filter special characters. This vulnerability will cause the application t...

Cross site request forgery (csrf)

TP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is vulnerable to Cross Site Request Forgery CSRF. All configuration information is placed in the URL, without any additional token authentication information. A malicious link opened by the switch administrator may cause the passwo...

CVE-2021-31659

TP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is vulnerable to Cross Site Request Forgery CSRF. All configuration information is placed in the URL, without any additional token authentication information. A malicious link opened by the switch administrator may cause the passwo...

CVE-2021-31659

CVE-2021-31659 affects TP-Link TL-SG2005 and TL-SG2008 (1.0.0 Build 20180529 Rel.40524). The root cause is a CSRF vulnerability where sensitive configuration is in the URL and no token authentication is required, enabling a crafted link to modify the switch password and tamper configuration. Expl...

CVE-2021-31658

The CVE-2021-31658 entry concerns TP-Link TL-SG2005 and TL-SG2008 (version 1.0.0 Build 20180529 Rel.40524). The vulnerability is an array index error in the interface that provides the Device Description, which only checks data length and does not filter special characters. This can cause the app...

CVE-2021-31658

TP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is affected by an Array index error. The interface that provides the "device description" function only judges the length of the received data, and does not filter special characters. This vulnerability will cause the application t...

TP-Link TL-SG2005和TP-Link TL-SG2008 输入验证错误漏洞

Tp-link TP-Link TL-SG2005 and TP-Link TL-SG2008 are both switches from Tp-link. A security vulnerability exists in TP-Link TL-SG2005 and TL-SG2008. The vulnerability originates from version 1.0.0 of TL-SG2005 and TL-SG2008, which is affected by an array indexing error, whereby the interfaces that...

Tp-link TP-Link TL-SG2005和TP-Link TL-SG2008 跨站请求伪造漏洞

Tp-link TP-Link TL-SG2005 and TP-Link TL-SG2008 are both switches from China's Tp-link. A cross-site request forgery vulnerability exists in multiple Tp-Link models. The vulnerability stems from the lack of authentication of sensitive URLs within the switch, which allows an attacker to modify...

TP-Link WR2041 Buffer Overflow (CVE-2021-26827)

A buffer overflow vulnerability exists in TP-Link WR2041. Successful exploitation of this vulnerability could allow a remote attacker to cause an application crash...

Stack Overflow Vulnerability in Multiple TPLINK Routers

The TP-Link TL-WDR5620 is a smart router.The TP-Link TL-WDR5650 is a dual-band wireless router.The TP-LINK TL-WR842N is a wireless router.The TP-link TL-WDR7660, TL-WDR7620, TL-WDR7661, TL-WDR7650 and the TL-R470P-AC are all gigabit version routers.TP-link TL-WA933RE is a cellular wireless...

TP-Link Archer C1200 Cross-Site Scripting Vulnerability (CNVD-2022-21173)

TP-Link Archer C1200 is a wireless dual-band Gigabit router. a cross-site scripting vulnerability exists in TP-Link Archer. A remote attacker can exploit this vulnerability to execute arbitrary code...