CVE-2018-12574

CSRF exists for all actions in the web interface on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices...

Authentication flaw

On TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 171019 Rel.55346n devices, all actions in the web interface are affected by bypass of authentication via an HTTP request...

CVE-2018-12575

On TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 171019 Rel.55346n devices, all actions in the web interface are affected by bypass of authentication via an HTTP request...

CVE-2018-12574

CSRF exists for all actions in the web interface on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices...

CVE-2018-12574

CVE-2018-12574 affects TP-Link TL-WR841N v13. The web UI is vulnerable to Cross-Site Request Forgery via a flawed referer-based protection: requests from crafted domains bypass the check and perform arbitrary actions as an authenticated user. Affected version: 0.9.1 4.16 v0001.0 Build 180119 Rel....

CVE-2018-12575

The CVE-2018-12575 entry concerns TP-Link TL-WR841N v13 devices (firmware 0.9.1 4.16 v0001.0 Build 171019 Rel.55346n). Multiple connected records describe an authentication bypass in the router’s web interface: an unauthenticated attacker can send HTTP requests to CGI scripts to bypass login and ...

CVE-2018-12576

TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow clickjacking...

CVE-2018-12577

CVE-2018-12577 affects TP-Link TL-WR841N v13 devices (firmware 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n). The Ping and Traceroute features are susceptible to authenticated blind command injection due to unsanitized user input being incorporated into commands. An authenticated attacker can execu...

CVE-2018-12576

CVE-2018-12576 affects TP-Link TL-WR841N v13 (firmware 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n). The issue is a clickjacking vulnerability in the device’s web UI. CVSSv3.0 shows an attacker would need network access with user interaction required to trigger impact on UI integrity, with no conf...

CVE-2018-12577

The Ping and Traceroute features on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow authenticated blind Command Injection...

TP-Link TL-WR841N V13 Cross Site Request Forgery Vulnerability

Exploit for hardware platform in category web applications Vulnerability: Cross-Site Request Forgery Affected Software: TP-Link TL-WR841N v13 Affected Version: 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n Patched Version: None Overview The web interface of the router is vulnerable to CSRF. An...

TP-Link TL-WR841N V13 Command Injection Vulnerability

Exploit for hardware platform in category web applications Vulnerability: Authenticated Blind Command Injection Affected Software: TP-Link TL-WR841N v13 Affected Version: 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n Patched Version: None Overview The ping and traceroute functionalities allow for OS...

TP-Link TL-WR841N V13 Insecure Direct Object Reference Vulnerability

Exploit for hardware platform in category web applications Vulnerability: Broken Authentication Affected Software: TP-Link TL-WR841N v13 Affected Version: 0.9.1 4.16 v0001.0 Build 171019 Rel.55346n Patched Version: 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n Overview An attacker that can send HTTP...

TP-Link TL-WR841N v13 Cross-Site Request Forgery Vulnerability

The TP-Link TL-WR841N v13 is a wireless router device. A cross-site request forgery vulnerability exists in the TP-Link TL-WR841N v13, which allows an attacker to authenticate a user's name to perform arbitrary operations...

TP-Link TL-WR841N v13 Authentication Command Injection Vulnerability

The TP-Link TL-WR841N v13 is a wireless router device. An authentication command injection vulnerability exists in the TP-Link TL-WR841N v13 ping and traceroute functions. An authenticated attacker can execute arbitrary commands on the router by sending specific CREST HTTP requests to the router...

Command Execution Vulnerability in Multiple Interfaces of TP_LINK TL-WAR302 Router

TPLINK TL-WAR302 is an enterprise-grade 300M wireless VPN router with support for multiple VPN clients and Internet behavior management. A command execution vulnerability exists in multiple interfaces of the TPLINK TL-WAR302 router. The vulnerability is caused due to TP-LINK WAR302 multiple...

TP-Link TL-WA850RE - Remote Command Execution

!/usr/bin/env python Exploit Title: TP-Link Technologies TL-WA850RE Wi-Fi Range Extender - Command Execution Date: 19/06/2018 Exploit Author: yoresongo - Advisability S.A.S Colombia www.advisability.co Vendor Homepage: https://www.tp-link.com/ Firmware Link:...

TP-Link TL-WR841N and TL-WR841ND Cross-Site Request Forgery Vulnerability

The TP-Link TL-WR841N and TL-WR841ND are both wireless router devices. TP-Link TL-WR841N and TL-WR841ND cross-site request forgery vulnerability. An attacker could use this vulnerability to perform certain administrator actions and gain unauthorized access to affected applications, and other...

TP-Link TL-WR841N V13 Command Injection

Vulnerability: Authenticated Blind Command Injection Affected Software: TP-Link TL-WR841N v13 Affected Version: 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n Patched Version: None Risk: High Vendor Contacted: 05/20/2018 Vendor Fix: None Public Disclosure: 06/27/2018 Overview The ping and traceroute...

TP-Link TL-WR841N V13 Cross Site Request Forgery

Vulnerability: Cross-Site Request Forgery Affected Software: TP-Link TL-WR841N v13 Affected Version: 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n Patched Version: None Risk: High Vendor Contacted: 05/20/2018 Vendor Fix: None Public Disclosure: 06/27/2018 Overview The web interface of the router is...