163 matches found
CVE-2021-44631
CVE-2021-44631 affects TP-LINK WR-886N (firmware 20190826 2.3.8). The vulnerability is a buffer overflow in the /cloud_config/router_post/reset_cloud_pwd function that could allow an unauthenticated or unauthenticated-adjacent attacker to execute arbitrary code via a crafted POST request. Public ...
CVE-2021-44630
CVE-2021-44630 affects TP-LINK WR-886N (firmware 20190826 2.3.8). The vulnerability is a Buffer Overflow in the /cloud_config/router_post/modify_account_pwd endpoint that can allow an authenticated attacker to execute arbitrary code on the device via a crafted POST request. The CVE descriptions c...
CVE-2021-44629
A Buffer Overflow vulnerabilitiy exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloudconfig/routerpost/register feature, which allows malicious users to execute arbitrary code on the system via a crafted post request...
CVE-2021-44629
CVE-2021-44629 describes a buffer overflow in TP-LINK WR-886N (firmware version 20190826, 2.3.8) in the /cloud_config/router_post/register function. A crafted POST request can cause arbitrary code execution on affected devices. Publicly available connected documents confirm the same class of vuln...
CVE-2021-44628
CVE-2021-44628 affects TP-Link WR-886N devices with firmware 20190826 2.3.8. The vulnerability is in the /cloud_config/router_post/login function and is described as a buffer overflow caused by improper data handling, allowing a remote attacker to execute arbitrary code by sending a crafted POST ...
CVE-2021-44628
A Buffer Overflow vulnerabiltiy exists in TP-LINK WR-886N 20190826 2.3.8 in thee /cloudconfig/routerpost/login feature, which allows malicious users to execute arbitrary code on the system via a crafted post request...
CVE-2021-44627
TP-LINK WR-886N (firmware version 20190826 2.3.8) contains a Buffer Overflow in the /cloud_config/router_post/get_reset_pwd_veirfy_code handler. Multiple sources (NVD CVE-2021-44627 and CNVD/CNNVD variants) describe that an unauthenticated or network-proximate attacker can trigger arbitrary code ...
CVE-2021-44627
A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloudconfig/routerpost/getresetpwdveirfycode feature, which allows malicious users to execute arbitrary code on the system via a crafted post request...
CVE-2021-44626
The CVE-2021-44626 entry concerns TP-LINK WR-886N firmware (20190826, version 2.3.8) with a Buffer Overflow vulnerability in the /cloud_config/router_post/get_reg_verify_code endpoint. An attacker can trigger arbitrary code execution by sending a crafted POST request, per sources in the CVE descr...
CVE-2021-44626
A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloudconfig/routerpost/getregverifycode feature, which allows malicious users to execute arbitrary code on the system via a crafted post request...
CVE-2021-44625
CVE-2021-44625 affects TP-LINK WR-886N (firmware 20190826 2.3.8) via the /cloud_config/cloud_device/info interface. The vulnerability is described as a buffer overflow that lets an unauthenticated attacker craft a POST request to execute arbitrary code on the device. Data from connected documents...
CVE-2021-44625
A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in /cloudconfig/clouddevice/info interface, which allows a malicious user to executee arbitrary code on the system via a crafted post request...
CVE-2021-44623
TP-LINK WR-886N (BI: 20190826, 2.3.8) is affected by CVE-2021-44623 due to a Buffer Overflow in the /cloud_config/router_post/check_reset_pwd_verify_code interface. Multiple sources describe a vulnerability that could crash the application or allow arbitrary code execution in the affected device ...
CVE-2021-44623
A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 via the /cloudconfig/routerpost/checkresetpwdverifycode interface...
CVE-2021-44622
A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloudconfig/routerpost/checkregverifycode function which could let a remove malicious user execute arbitrary code via a crafted post request...
VINGA WR-N300U Router Command Injection (CVE-2021-43469)
A command injection vulnerability exists in VINGA WR-N300U Router. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
CVE-2021-35978
An issue was discovered in Digi TransPort DR64, SR44 VC74, and WR. The ZING protocol allows arbitrary remote command execution with SUPER privileges. This allows an attacker with knowledge of the protocol to execute arbitrary code on the controller including overwriting firmware, adding/removing...
CVE-2021-43469
VINGA WR-N300U 77.102.1.4853 is affected by a command execution vulnerability in the goahead component...