Lucene search
+L

5044 matches found

OSV
OSV
added 2025/12/18 6:15 p.m.8 views

CVE-2025-14738

Improper authentication vulnerability in TP-Link WA850RE httpd modules allows unauthenticated attackers to download the configuration file.This issue affects: ≤ WA850RE V2160527, ≤ WA850RE V3160922...

7.5CVSS5.8AI score0.00412EPSS
SaveExploits0References4
NVD
NVD
added 2025/12/18 6:15 p.m.13 views

CVE-2025-14738

Improper authentication vulnerability in TP-Link WA850RE httpd modules allows unauthenticated attackers to download the configuration file.This issue affects: ≤ WA850RE V2160527, ≤ WA850RE V3160922...

7.5CVSS0.00412EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/12/18 6:2 p.m.38 views

CVE-2025-14739 Uninitialized Pointer Vulnerability in TP-Link WR940N and WR941ND

Access of Uninitialized Pointer vulnerability in TP-Link WR940N and WR941ND allows local unauthenticated attackers the ability to execute DoS attack and potentially arbitrary code execution under the context of the ‘root’ user.This issue affects WR940N and WR941ND: ≤ WR940N v5 3.20.1 Build 200316...

7.7CVSS0.0021EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/12/18 6:2 p.m.5 views

CVE-2025-14739 Uninitialized Pointer Vulnerability in TP-Link WR940N and WR941ND

Access of Uninitialized Pointer vulnerability in TP-Link WR940N and WR941ND allows local unauthenticated attackers the ability to execute DoS attack and potentially arbitrary code execution under the context of the ‘root’ user.This issue affects WR940N and WR941ND: ≤ WR940N v5 3.20.1 Build 200316...

7.7CVSS7.5AI score0.0021EPSS
SaveExploits0References4
CVE
CVE
added 2025/12/18 6:2 p.m.52 views

CVE-2025-14739

The CVE-2025-14739 entry describes an Access of Uninitialized Pointer vulnerability in TP-Link WR940N and WR941ND routers. Affected devices are WR940N (≤ v5 3.20.1 Build 200316) and WR941ND (≤ v6 3.16.9 Build 151203). The issue allows local, unauthenticated attackers to cause a DoS and potentiall...

7.7CVSS7.5AI score0.0021EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/12/18 6:1 p.m.42 views

CVE-2025-14738 Configuration Disclosure Vulnerability in TP-Link WA850RE

Improper authentication vulnerability in TP-Link WA850RE httpd modules allows unauthenticated attackers to download the configuration file.This issue affects: ≤ WA850RE V2160527, ≤ WA850RE V3160922...

7.1CVSS0.00412EPSS
SaveExploits0References4
CVE
CVE
added 2025/12/18 6:1 p.m.25 views

CVE-2025-14738

CVE-2025-14738 describes an improper authentication vulnerability in TP-Link WA850RE (httpd modules) that allows unauthenticated attackers to download the device configuration file. Affected are WA850RE V2_160527 and WA850RE V3_160922. The issue is triggered via the httpd module and does not requ...

7.5CVSS6.7AI score0.00412EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/18 6:1 p.m.4 views

CVE-2025-14738 Configuration Disclosure Vulnerability in TP-Link WA850RE

Improper authentication vulnerability in TP-Link WA850RE httpd modules allows unauthenticated attackers to download the configuration file.This issue affects: ≤ WA850RE V2160527, ≤ WA850RE V3160922...

7.1CVSS6.7AI score0.00412EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/12/18 6:0 p.m.38 views

CVE-2025-14737 Command Injection Vulnerability in TP-Link WA850RE

Command Injection vulnerability in TP-Link WA850RE httpd modules allows authenticated adjacent attacker to inject arbitrary commands.This issue affects: ≤ WA850RE V2160527, ≤ WA850RE V3160922...

8.5CVSS0.01047EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/12/18 6:0 p.m.3 views

CVE-2025-14737 Command Injection Vulnerability in TP-Link WA850RE

Command Injection vulnerability in TP-Link WA850RE httpd modules allows authenticated adjacent attacker to inject arbitrary commands.This issue affects: ≤ WA850RE V2160527, ≤ WA850RE V3160922...

8.5CVSS6.8AI score0.01047EPSS
SaveExploits0References4
CVE
CVE
added 2025/12/18 6:0 p.m.26 views

CVE-2025-14737

CVE-2025-14737 concerns a command-injection vulnerability in TP-Link WA850RE (httpd modules) that allows an authenticated adjacent attacker to inject arbitrary commands. Affected devices include WA850RE V2_160527 and WA850RE V3_160922 (and earlier), with exploitation described as possible (PoC) p...

8.5CVSS6.8AI score0.01047EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.18 views

TP-Link WA850RE 安全漏洞

TP-Link WA850RE is a wireless signal extender from China P&L TP-Link. A security vulnerability exists in the TP-Link WA850RE V2160527 and prior versions, which stems from improper authentication of the httpd module and could result in the downloading of configuration files...

7.5CVSS6.9AI score0.00412EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.7 views

TP-Link WR940N 安全漏洞

The TP-Link WR940N is a wireless router from China P&L TP-Link. A security vulnerability exists in TP-Link WR940N 3.20.1 Build 200316 and earlier versions, which originates from uninitialized pointer access and could lead to denial of service and execution of arbitrary code...

7.7CVSS6.8AI score0.0021EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.8 views

PT-2025-52278

Access of Uninitialized Pointer vulnerability in TP-Link WR940N and WR941ND allows local unauthenticated attackers the ability to execute DoS attack and potentially arbitrary code execution under the context of the ‘root’ user.This issue affects WR940N and WR941ND: ≤ WR940N v5 3.20.1 Build 200316...

7.7CVSS7.8AI score0.0021EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.6 views

TP-Link WA850RE 安全漏洞

TP-Link WA850RE is a wireless signal extender from China P&L TP-Link. A security vulnerability exists in the TP-Link WA850RE V2160527 and earlier versions, which originates from a command injection in the httpd module that could lead to the execution of arbitrary commands...

8.5CVSS7.5AI score0.01047EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.26 views

PT-2025-52277

Improper authentication vulnerability in TP-Link WA850RE httpd modules allows unauthenticated attackers to download the configuration file.This issue affects: ≤ WA850RE V2 160527, ≤ WA850RE V3 160922...

7.1CVSS7.1AI score0.00412EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.15 views

PT-2025-52276

Command Injection vulnerability in TP-Link WA850RE httpd modules allows authenticated adjacent attacker to inject arbitrary commands.This issue affects: ≤ WA850RE V2 160527, ≤ WA850RE V3 160922...

8.5CVSS7.2AI score0.01047EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/12/17 7:0 p.m.16 views

CVE-2025-14553

Exposure of password hashes through an unauthenticated API response in TP-Link Tapo app on iOS and Android for Tapo cameras, allowing attackers to brute force the password in the local network. Issue can be mitigated through mobile application updates. Device firmware remains unchanged...

7CVSS6.6AI score0.0019EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/16 9:30 p.m.10 views

EUVD-2025-203829

Exposure of password hashes through an unauthenticated API response in TP-Link Tapo C210 V.1.8 app on iOS and Android, allowing attackers to brute force the password in the local network. Issue can be mitigated through mobile application updates. Device firmware remains unchanged...

7CVSS6.2AI score0.0019EPSS
SaveExploits0References4
NVD
NVD
added 2025/12/16 7:15 p.m.10 views

CVE-2025-14553

Exposure of password hashes through an unauthenticated API response in TP-Link Tapo app on iOS and Android for Tapo cameras, allowing attackers to brute force the password in the local network. Issue can be mitigated through mobile application updates. Device firmware remains unchanged...

7CVSS0.0019EPSS
SaveExploits0References3
Rows per page
Query Builder