CVE-2020-12695

CVE-2020-12695 (CallStranger) concerns UPnP SUBSCRIBE handling in the Open Connectivity Foundation specification prior to 2020-04-17. The root cause is a controllable Callback header that can trigger HTTP connections to arbitrary URLs, enabling SSRF-like behavior and potentially leading to amplif...

CVE-2020-9375

The CVE-2020-9375 affects the TP-Link Archer C50 V3 router prior to Build 200318 Rel. 62209. A remote attacker can cause a Denial of Service by sending an HTTP request with an illegal Referer header. A Proof-of-Concept exploit exists (PoC) demonstrating a denial-of-service via crafted Referer hea...

CVE-2023-0936

CVE-2023-0936 affects TP-Link Archer C50 V2 with the Web Management Interface. The issue is a denial of service caused by manipulation of an unknown functionality, exploitable only on the local network. Public disclosure is noted. Connected references confirm the vulnerable component and affected...