CVE-2019-13613

CMDFTESTCONFIG in the TP-Link Device Debug protocol in TP-Link Wireless Router Archer Router version 1.0.0 Build 20180502 rel.45702 EU and earlier is prone to a stack-based buffer overflow, which allows a remote attacker to achieve code execution or denial of service by sending a crafted payload ...

TP-Link TL-WR940N / TL-WR941ND Cross Site Request Forgery

Hello list! There are Brute Force and Cross-Site Request Forgery vulnerabilities in TP-Link TL-WR940N and TL-WR941ND. After my advisory about vulnerabilities in TP-Link TL-WR841N and TL-WR841ND in 2017. ------------------------- Affected products: ------------------------- Vulnerable are the next...

TP-Link Wi-Fi extender remote code execution vulnerability analysis-vulnerability warning-the black bar safety net

WiFi extender can enlarge the WiFi signal, mainly used for large or multi-storey residential, and the router signal can not cover the family's case. The extender's principle is from the main router to get a WiFi signal, and broadcast channel other WiFi signal weak or no signal area. IBM X-Force...

TP-Link Wi-Fi Extender Remote Code Execution Vulnerability

TP-LINK is a brand of P&L Technology Co., Ltd. and is a mainstream manufacturer engaged in the research and development, manufacturing and marketing of network and communication terminal equipment. A remote code execution vulnerability exists in TP-Link Wi-Fi extenders. It allows an attacker to...

TP-Link TL-WR1043ND Buffer Overflow Vulnerability

The TP-Link TL-WR1043ND is a wireless router from China P&L TP-Link. The TP-Link TL-WR1043ND suffers from a buffer overflow vulnerability. An attacker can exploit this vulnerability to cause a buffer overflow or heap overflow, among others...

CVE-2018-16119

Stack-based buffer overflow in the httpd server of TP-Link WR1043nd Firmware Version 3 allows remote attackers to execute arbitrary code via a malicious MediaServer request to /userRpm/MediaServerFoldersCfgRpm.htm...

CVE-2018-16119

Stack-based buffer overflow in the httpd server of TP-Link WR1043nd Firmware Version 3 allows remote attackers to execute arbitrary code via a malicious MediaServer request to /userRpm/MediaServerFoldersCfgRpm.htm...

Stack overflow

Stack-based buffer overflow in the httpd server of TP-Link WR1043nd Firmware Version 3 allows remote attackers to execute arbitrary code via a malicious MediaServer request to /userRpm/MediaServerFoldersCfgRpm.htm...

CVE-2018-16119

Stack-based buffer overflow in the httpd server of TP-Link WR1043nd Firmware Version 3 allows remote attackers to execute arbitrary code via a malicious MediaServer request to /userRpm/MediaServerFoldersCfgRpm.htm...

CVE-2018-16119

CVE-2018-16119: TP-Link WR1043ND (Firmware Version 3) httpd is vulnerable to a stack-based buffer overflow via a crafted MediaServer request to /userRpm/MediaServerFoldersCfgRpm.htm, enabling remote arbitrary code execution. The Red Hat and other CNVD/CVE records confirm the same description; no ...

TP-Link TL-WR1043ND Authorization Issues Vulnerability

The TP-Link TL-WR1043ND is a wireless router from China P&L TP-Link. An authorization issue vulnerability exists in the TP-Link TL-WR1043ND V2. The vulnerability stems from a lack of authentication measures or insufficient authentication strength in the network system or product. No detailed...

TP-Link TL-WR1043ND Encryption Issue Vulnerability

The TP-Link TL-WR1043ND is a wireless router from China P&L TP-Link. An encryption issue vulnerability exists in the TP-Link TL-WR1043ND V2. The vulnerability stems from a network system or product that does not properly use the relevant cryptographic algorithms, and can be exploited by an attack...

CVE-2019-6972

An issue was discovered on TP-Link TL-WR1043ND V2 devices. The credentials can be easily decoded and cracked by brute-force, WordList, or Rainbow Table attacks. Specifically, credentials in the "Authorization" cookie are encoded with URL encoding and base64, leading to easy decoding. Also, the...

CVE-2019-6971

An issue was discovered on TP-Link TL-WR1043ND V2 devices. An attacker can send a cookie in an HTTP authentication packet to the router management web interface, and fully control the router without knowledge of the credentials...

CVE-2019-6971

An issue was discovered on TP-Link TL-WR1043ND V2 devices. An attacker can send a cookie in an HTTP authentication packet to the router management web interface, and fully control the router without knowledge of the credentials...

Default credentials

An issue was discovered on TP-Link TL-WR1043ND V2 devices. The credentials can be easily decoded and cracked by brute-force, WordList, or Rainbow Table attacks. Specifically, credentials in the "Authorization" cookie are encoded with URL encoding and base64, leading to easy decoding. Also, the...

Authentication flaw

An issue was discovered on TP-Link TL-WR1043ND V2 devices. An attacker can send a cookie in an HTTP authentication packet to the router management web interface, and fully control the router without knowledge of the credentials...

CVE-2019-6972

An issue was discovered on TP-Link TL-WR1043ND V2 devices. The credentials can be easily decoded and cracked by brute-force, WordList, or Rainbow Table attacks. Specifically, credentials in the "Authorization" cookie are encoded with URL encoding and base64, leading to easy decoding. Also, the...

CVE-2019-6972

The CVE-2019-6972 issue affects TP-Link TL-WR1043ND V2 devices. The vulnerability arises from credentials stored in the Authorization cookie being URL-encoded and base64 encoded, making them easily decoded; the username is in cleartext and the password is MD5-hashed after decoding. This exposes w...

CVE-2019-6971

An issue was discovered on TP-Link TL-WR1043ND V2 devices. An attacker can send a cookie in an HTTP authentication packet to the router management web interface, and fully control the router without knowledge of the credentials...