178 matches found
Cross site scripting
A password-disclosure issue in the web interface on certain TP-Link devices allows a remote attacker to get full administrative access to the web panel. This affects WA901ND devices before 3.16.9201211 beta, and Archer C5, Archer C7, MR3420, MR6400, WA701ND, WA801ND, WDR3500, WDR3600, WE843N,...
The vulnerability of the ipAddrDispose function in TP-Link router microprogramming systems such as TL-WR940N and TL-WR941ND allows attackers to escalate their privileges and execute arbitrary code.
The vulnerability of the ipAddrDispose function in TP-Link’s router software models TL-WR940N and TL-WR941ND arises due to an overflow in the buffer on the stack. Exploiting this vulnerability allows a remote attacker to enhance their privileges and execute arbitrary code by sending specially...
TP-Link TL-WR940N / TL-WR941ND Cross Site Request Forgery
Hello list! There are Brute Force and Cross-Site Request Forgery vulnerabilities in TP-Link TL-WR940N and TL-WR941ND. After my advisory about vulnerabilities in TP-Link TL-WR841N and TL-WR841ND in 2017. ------------------------- Affected products: ------------------------- Vulnerable are the next...
Stack overflow
TP-Link TL-WR940N is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the ipAddrDispose function. By sending specially crafted ICMP echo request packets, a remote authenticated attacker could overflow a buffer and execute arbitrary code on the system with elevate...
CVE-2019-6989
TP-Link TL-WR940N is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the ipAddrDispose function. By sending specially crafted ICMP echo request packets, a remote authenticated attacker could overflow a buffer and execute arbitrary code on the system with elevate...
CVE-2019-6989
TP-Link TL-WR940N is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the ipAddrDispose function. By sending specially crafted ICMP echo request packets, a remote authenticated attacker could overflow a buffer and execute arbitrary code on the system with elevate...
CVE-2019-6989
CVE-2019-6989 describes a stack-based buffer overflow in TP-LINK TL-WR940N (and TL-WR941ND) caused by improper bounds checking in ipAddrDispose. The vulnerability can be triggered by specially crafted ICMP echo requests, allowing a remote authenticated attacker to overflow a buffer and execute ar...
PT-2019-3733
Name of the Vulnerable Software and Affected Versions TP-Link TL-WR940N version not specified TP-Link TL-WR941ND version not specified Description The issue is caused by a stack-based buffer overflow due to improper bounds checking by the ipAddrDispose function. This can be exploited by sending...
CVE-2019-6989: Out-of-bounds Write
TP-Link TL-WR940N is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the ipAddrDispose function. By sending specially crafted ICMP echo request packets, a remote authenticated attacker could overflow a buffer and execute arbitrary code on the system with elevate...
TP-Link TL-WR Buffer Overflow Remote Code Execution (CVE-2019-6989)
An arbitrary code execution vulnerability exists in TP-LINK TL-WR940N and TL-WR941ND. A remote attacker can exploit this vulnerability by sending a maliciously crafted packet to the target server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary cod...
TP-Link Routers Vulnerable to Zero-Day Buffer Overflow Attack
Two models of TP-Link’s budget routers are vulnerable to zero-day flaws that allow attackers to take control of both. The routers in question are models TP-Link WR940N and TL-WR941ND, according IBM Security, which found the bugs and posted a technical analysis on its discoveries on Monday. “In th...
Stack overflow
Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated users to execute arbitrary code via the 1 pingaddr parameter to PingIframeRpm.htm or 2 dnsserver2 parameter to WanStaticIpV6CfgRpm.htm...
CVE-2017-13772
Summary (from provided sources): CVE-2017-13772 is a stack-based buffer overflow vulnerability in TP-Link WR940N routers (hardware version 4) that allows remote authenticated code execution via GET parameters, specifically ping_addr in PingIframeRpm.htm or dnsserver2 in WanStaticIpV6CfgRpm.htm. C...
CVE-2017-13772
Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated users to execute arbitrary code via the 1 pingaddr parameter to PingIframeRpm.htm or 2 dnsserver2 parameter to WanStaticIpV6CfgRpm.htm...
PT-2017-13091
Name of the Vulnerable Software and Affected Versions TP-Link WR940N WiFi routers with hardware version 4 Description The issue concerns multiple stack-based buffer overflows that allow remote authenticated users to execute arbitrary code. This can be achieved via the ping addr parameter to...
TP-Link WR940N Remote Code Execution Vulnerability
The TP-Link WR940N is a SOHO wireless router. A remote code execution vulnerability exists in the TP-Link WR940N. The vulnerability can be exploited by a remote authenticated user to execute arbitrary code via the pingaddr parameter of PingIframeRpm.htm or the dnsserver2 parameter of...
CVE-2017-13772: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated users to execute arbitrary code via the 1 pingaddr parameter to PingIframeRpm.htm or 2 dnsserver2 parameter to WanStaticIpV6CfgRpm.htm...
TP-Link WR940N - (Authenticated) Remote Code
TP-Link WR940N - Authenticated Remote Code import urllib2 import base64 import hashlib from optparse import import sys import urllibbanner = "\n" "WR940N Authenticated Remote Code Exploit\n" "This exploit will open a bind shell on the remote target\n" "The port is 31337, you can change that in th...