Lucene search
+L

133 matches found

Check Point Advisories
Check Point Advisories
added 2022/11/13 12:0 a.m.64 views

TP Link Wr940N Routers Buffer Overflow (CVE-2017-13772)

A buffer overflow vulnerability exists in TP Link Wr940N Firmware. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

9CVSS6.9AI score0.52559EPSS
SaveExploits9
Positive Technologies
Positive Technologies
added 2022/10/27 12:0 a.m.6 views

PT-2022-6362 · Tp Link · Tp-Link Tl-Wr940N

Name of the Vulnerable Software and Affected Versions: TP-Link router TL-WR940N V6 version 3.19.1 Build 180119 Description: The issue is related to the use of a deprecated MD5 algorithm to hash the admin password used for basic authentication. This could allow a remote attacker to gain unauthoriz...

7.5CVSS7.9AI score0.00362EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2022/03/01 12:0 a.m.8 views

The vulnerability of the httpd daemon in the microprogramming software of TP-Link’s TL-WR940N router allows a intruder to gain unauthorized access to protected information.

The vulnerability of the httpd daemon in the microprogramming-based router software from TP-Link’s TL-WR940N is related to deficiencies in access control. Exploiting this vulnerability could allow a hacker to gain unauthorized access to protected information...

6.5CVSS6.5AI score0.00585EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/01 12:0 a.m.64 views

The vulnerability of the httpd daemon in the microprogramming software of TP-Link’s TL-WR940N router allows a hacker to execute arbitrary code.

The vulnerability of the httpd daemon in the microprogramming-based router software from TP-Link, the TL-WR940N, is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code...

7.4CVSS7.2AI score0.00724EPSS
SaveExploits0References6Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2022/02/22 12:0 a.m.45 views

TP-Link TL-WR940N httpd ssid1 Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue...

6.8CVSS3.5AI score0.00724EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/02/22 12:0 a.m.11 views

The vulnerability of TP-Link TL-WR940N router’s microprogramming software lies in the overflow of buffers on the stack, allowing an attacker to execute arbitrary code.

The vulnerability of TP-Link TL-WR940N router’s microprogramming software is related to buffer overflows during syntax analysis of file extension names. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

8.8CVSS8.2AI score0.02051EPSS
SaveExploits0References7Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2022/02/22 12:0 a.m.87 views

TP-Link TL-WR940N httpd newBridgessid Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue...

6.8CVSS3.1AI score0.00724EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2022/02/22 12:0 a.m.35 views

TP-Link TL-WR940N httpd Improper Access Control Information Disclosure Vulnerability

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR940N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default...

6.5CVSS0.8AI score0.00585EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/02/18 8:15 p.m.19 views

CVE-2022-24355

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n 5553 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of file name...

8.8CVSS7.7AI score0.02051EPSS
SaveExploits0References2
NVD
NVD
added 2022/02/18 8:15 p.m.35 views

CVE-2022-24355

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n 5553 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of file name...

8.8CVSS0.02051EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/18 8:15 p.m.4 views

CVE-2022-24355

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n 5553 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of file name...

8.8CVSS6.2AI score0.02051EPSS
SaveExploits0References1
Prion
Prion
added 2022/02/18 8:15 p.m.21 views

Stack overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n 5553 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of file name...

8.3CVSS8.9AI score0.02051EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/02/18 7:52 p.m.113 views

CVE-2022-24355

CVE-2022-24355 affects TP-Link TL-WR940N routers (3.20.1 Build 200316 Rel.34392n) where the httpd parsing of file name extensions fails to validate the length of user-supplied data before copying to a fixed-size stack buffer, enabling network-adjacent, unauthenticated remote code execution as roo...

8.8CVSS8.8AI score0.02051EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2022/02/14 12:0 a.m.95 views

TP-Link TL-WR940N Buffer Overflow Vulnerability

Tp-link TP-Link TL-WR940N is a wireless router from China P&L Tp-link. The TP-Link TL-WR940N suffers from a buffer overflow vulnerability that stems from a lack of proper validation of the length of user-supplied data before copying it into a fixed-length stack-based buffer. An attacker could...

8.8CVSS9AI score0.02051EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/02/10 12:0 a.m.18 views

Tp-link TP-Link TL-WR940N 安全漏洞

Tp-link TP-Link TL-WR940N is a wireless router from China P&L Tp-link. The TP-Link TL-WR940N suffers from a buffer overflow vulnerability that stems from a lack of proper validation of the length of user-supplied data before copying it into a fixed-length stack-based buffer. An attacker could...

8.8CVSS6.4AI score0.02051EPSS
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
added 2022/02/10 12:0 a.m.44 views

TP-Link TL-WR940N httpd httpRpmFs Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of file name extensions. The issue results from the lack...

8.8CVSS3.9AI score0.02051EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2021/10/21 12:0 a.m.8 views

PT-2021-6151 · Tp Link · Tp-Link Tl-Wr940N

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR940N version 3.20.1 Build 200316 Rel.34392n 5553 Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N routers. Authentication is required to exploit th...

8CVSS7.1AI score0.00724EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2021/10/21 12:0 a.m.6 views

PT-2021-6150 · Tp Link · Tp-Link Tl-Wr940N

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR940N version 3.20.1 Build 200316 Rel.34392n 5553 Description: The issue results from the lack of proper access control within the httpd service, which listens on TCP port 80 by default. This allows network-adjacent attackers to...

6.5CVSS6.3AI score0.00585EPSS
SaveExploits0References7
CNVD
CNVD
added 2021/05/07 12:0 a.m.4 views

Denial of Service Vulnerability in TP-Link TL-WR940N

The TL-WR940N is a wireless router. A denial of service vulnerability exists in the TP-Link TL-WR940N, which can be exploited by an attacker to cause a program crash...

6.9AI score
SaveExploits0
Prion
Prion
added 2020/12/26 2:15 a.m.19 views

Cross site scripting

A password-disclosure issue in the web interface on certain TP-Link devices allows a remote attacker to get full administrative access to the web panel. This affects WA901ND devices before 3.16.9201211 beta, and Archer C5, Archer C7, MR3420, MR6400, WA701ND, WA801ND, WDR3500, WDR3600, WE843N,...

7.5CVSS9.3AI score0.07643EPSS
SaveExploits3References4Affected Software1
Rows per page
Query Builder