The vulnerability in the implementation of the dm_checkString() function of the libcmm.so module in the TP-Link TL-WR840N (ES) router’s software allows a hacker to cause a service failure.

The vulnerability of the implementation of the dmcheckString function in the libcmm.so module of the TP-Link TL-WR840N ES router’s software lies in a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause a failure in the system by sending a specially crafted...

CVE-2022-26639

TP-LINK TL-WR840NESV6.20 was discovered to contain a buffer overflow via the DNSServers parameter...

CVE-2022-26640

TP-LINK TL-WR840NESV6.20 was discovered to contain a buffer overflow via the minAddress parameter...

CVE-2022-26642

TP-LINK TL-WR840NESV6.20 was discovered to contain a buffer overflow via the XTPClonedMACAddress parameter...

CVE-2022-26639

TP-LINK TL-WR840NESV6.20 was discovered to contain a buffer overflow via the DNSServers parameter...

CVE-2022-26641

TP-LINK TL-WR840NESV6.20 was discovered to contain a buffer overflow via the httpRemotePort parameter...

CVE-2022-26640

TP-LINK TL-WR840NESV6.20 was discovered to contain a buffer overflow via the minAddress parameter...

CVE-2022-26641

TP-LINK TL-WR840NESV6.20 was discovered to contain a buffer overflow via the httpRemotePort parameter...

CVE-2022-26641: Buffer Copy without Checking Size of Input

TP-LINK TL-WR840NESV6.20 was discovered to contain a buffer overflow via the httpRemotePort parameter...

CVE-2022-26642: Buffer Copy without Checking Size of Input

TP-LINK TL-WR840NESV6.20 was discovered to contain a buffer overflow via the XTPClonedMACAddress parameter...

CVE-2022-26639: Buffer Copy without Checking Size of Input

TP-LINK TL-WR840NESV6.20 was discovered to contain a buffer overflow via the DNSServers parameter...

CVE-2022-26640: Buffer Copy without Checking Size of Input

TP-LINK TL-WR840NESV6.20 was discovered to contain a buffer overflow via the minAddress parameter...

CVE-2022-25061

TP-LINK TL-WR840NESV6.20180709 was discovered to contain a command injection vulnerability via the component oalsetIp6DefaultRoute...

CVE-2022-25064

TP-LINK TL-WR840NESV6.20180709 was discovered to contain a remote code execution RCE vulnerability via the function oalwan6setIpAddr...

CVE-2022-25064: Improper Neutralization of Special Elements used in an OS Command

TP-LINK TL-WR840NESV6.20180709 was discovered to contain a remote code execution RCE vulnerability via the function oalwan6setIpAddr...

CVE-2022-25061: Improper Neutralization of Special Elements used in an OS Command

TP-LINK TL-WR840NESV6.20180709 was discovered to contain a command injection vulnerability via the component oalsetIp6DefaultRoute...

CVE-2022-25062: Integer Overflow or Wraparound

TP-LINK TL-WR840NESV6.20180709 was discovered to contain an integer overflow via the function dmcheckString. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted HTTP request...

CVE-2022-25060: Improper Neutralization of Special Elements used in an OS Command

TP-LINK TL-WR840NESV6.20180709 was discovered to contain a command injection vulnerability via the component oalstartPing...