Lucene search
+L

4972 matches found

NVD
NVD
added 2021/02/13 1:15 a.m.19 views

CVE-2021-27210

TP-Link Archer C5v 1.7181221 devices allows remote attackers to retrieve cleartext credentials via USERCFG0,0,0,0,0,00,0,0,0,0,00,0 to the /cgi?1&5 URI...

6.5CVSS0.00812EPSS
SaveExploits1References1
OSV
OSV
added 2021/02/13 1:15 a.m.6 views

CVE-2021-27209

In the management interface on TP-Link Archer C5v 1.7181221 devices, credentials are sent in a base64 format over cleartext HTTP...

7.1CVSS5.8AI score0.0023EPSS
SaveExploits1References1
OSV
OSV
added 2021/02/13 1:15 a.m.8 views

CVE-2021-27210

TP-Link Archer C5v 1.7181221 devices allows remote attackers to retrieve cleartext credentials via USERCFG0,0,0,0,0,00,0,0,0,0,00,0 to the /cgi?1&5 URI...

6.5CVSS6.7AI score0.00812EPSS
SaveExploits1References1
NVD
NVD
added 2021/02/13 1:15 a.m.20 views

CVE-2021-27209

In the management interface on TP-Link Archer C5v 1.7181221 devices, credentials are sent in a base64 format over cleartext HTTP...

7.1CVSS0.0023EPSS
SaveExploits1References1
Prion
Prion
added 2021/02/13 1:15 a.m.16 views

Format string

In the management interface on TP-Link Archer C5v 1.7181221 devices, credentials are sent in a base64 format over cleartext HTTP...

3.6CVSS6.9AI score0.0023EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2021/02/13 1:15 a.m.17 views

Design/Logic Flaw

TP-Link Archer C5v 1.7181221 devices allows remote attackers to retrieve cleartext credentials via USERCFG0,0,0,0,0,00,0,0,0,0,00,0 to the /cgi?1&5 URI...

4CVSS6.6AI score0.00812EPSS
SaveExploits1References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/02/13 1:15 a.m.3 views

CVE-2021-27209

In the management interface on TP-Link Archer C5v 1.7181221 devices, credentials are sent in a base64 format over cleartext HTTP...

7.1CVSS7.1AI score0.0023EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2021/02/13 1:15 a.m.3 views

CVE-2021-27210

TP-Link Archer C5v 1.7181221 devices allows remote attackers to retrieve cleartext credentials via USERCFG0,0,0,0,0,00,0,0,0,0,00,0 to the /cgi?1&5 URI...

6.5CVSS6.5AI score0.00812EPSS
SaveExploits1References2
CVE
CVE
added 2021/02/13 12:5 a.m.110 views

CVE-2021-27209

CVE-2021-27209 affects TP-Link Archer C5v 1.7_181221 devices where the management interface transmits credentials encoded in base64 over cleartext HTTP. The root cause is insecure transmission of authentication data in the management UI, enabling potential eavesdropping or credential exposure if ...

7.1CVSS6.9AI score0.0023EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/02/13 12:5 a.m.27 views

CVE-2021-27209

In the management interface on TP-Link Archer C5v 1.7181221 devices, credentials are sent in a base64 format over cleartext HTTP...

7.1AI score0.0023EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2021/02/13 12:4 a.m.24 views

CVE-2021-27210

TP-Link Archer C5v 1.7181221 devices allows remote attackers to retrieve cleartext credentials via USERCFG0,0,0,0,0,00,0,0,0,0,00,0 to the /cgi?1&5 URI...

6.8AI score0.00812EPSS
SaveExploits1References1
CVE
CVE
added 2021/02/13 12:4 a.m.103 views

CVE-2021-27210

The CVE-2021-27210 entry affects the TP-Link Archer C5v device (version 1.7_181221). Affected component/issue: information disclosure via the /cgi?1&5 URI, exploited by sending a crafted USER_CFG request to retrieve plaintext credentials. The vulnerability is described as a remote information dis...

6.5CVSS6.6AI score0.00812EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2021/02/12 12:0 a.m.8 views

TP-Link Archer C5v 安全漏洞

The TP-Link Archer C5v is an AC1200 wireless dual-band Gigabit VoIP router. An information disclosure vulnerability exists in TP-Link Archer C5v 1.7181221. A remote attacker can exploit this vulnerability by sending a USERCFG0,0,0,0,0,0,0,00,0,0,0,00,0 request to the /cgi?1&5 URI to retrieve...

6.5CVSS6.7AI score0.00812EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/02/12 12:0 a.m.9 views

TP-Link Archer C5v Security Vulnerability

A security vulnerability exists in TP-Link Archer C5v 1.7181221 devices, which originates when credentials are sent over plaintext HTTP in base64 format...

7.1CVSS7.1AI score0.0023EPSS
SaveExploits1References2
CNVD
CNVD
added 2021/01/28 12:0 a.m.11 views

Tp-link TL-WR841N Injection Vulnerability

The Tp-link TL-WR841N is a wireless router from China P&L Tp-link. The TP-Link TL-WR841N suffers from a parameter injection vulnerability that allows a remote authenticated malicious user to execute arbitrary commands on the system, which can be exploited by an attacker to execute arbitrary...

9CVSS7.6AI score0.42285EPSS
SaveExploits1References1
OSV
OSV
added 2021/01/26 6:15 p.m.8 views

CVE-2020-35576

A Command Injection issue in the traceroute feature on TP-Link TL-WR841N V13 JP with firmware versions prior to 201216 allows authenticated users to execute arbitrary code as root via shell metacharacters, a different vulnerability than CVE-2018-12577...

8.8CVSS7.5AI score0.42285EPSS
SaveExploits1References3
NVD
NVD
added 2021/01/26 6:15 p.m.32 views

CVE-2020-35576

A Command Injection issue in the traceroute feature on TP-Link TL-WR841N V13 JP with firmware versions prior to 201216 allows authenticated users to execute arbitrary code as root via shell metacharacters, a different vulnerability than CVE-2018-12577...

9CVSS9AI score0.42285EPSS
SaveExploits1References3
Prion
Prion
added 2021/01/26 6:15 p.m.17 views

Command injection

A Command Injection issue in the traceroute feature on TP-Link TL-WR841N V13 JP with firmware versions prior to 201216 allows authenticated users to execute arbitrary code as root via shell metacharacters, a different vulnerability than CVE-2018-12577...

9CVSS9AI score0.42285EPSS
SaveExploits3References3Affected Software1
CVE
CVE
added 2021/01/25 12:0 a.m.145 views

CVE-2020-35576

CVE-2020-35576 is a command-injection vulnerability in the traceroute feature of TP-Link TL-WR841N (V13, JP) firmware prior to 201216. Authenticated users can execute arbitrary code as root via shell metacharacters. Affected firmware versions include V13 with build 161028, and vendor guidance fix...

9CVSS8.9AI score0.42285EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2021/01/25 12:0 a.m.12 views

TP-LINK TL-WR841N 操作系统命令注入漏洞

The Tp-link TL-WR841N is a wireless router from China P&L Tp-link. The TP-Link TL-WR841N suffers from a parameter injection vulnerability that allows a remote authenticated malicious user to execute arbitrary commands on the system, which can be exploited by an attacker to execute arbitrary...

9CVSS7.5AI score0.42285EPSS
SaveExploits1References5
Rows per page
Query Builder