Tl-wr841n Firmware@0.9.1 4.16 Security Vulnerabilities and Issues — Tl-wr841n Firmware@0.9.1 4.16 CVE List

Lucene search

Tp-linkTl-wr841n Firmware0.9.1 4.16

6 matches found

CVE•added 2020/01/07 11:15 p.m.•125 views

CVE-2019-17147

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-LINK TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 80 by default. When parsing the Host ...

9.3CVSS8.9AI score0.21995EPSS

CVE•added 2018/07/02 4:29 p.m.•59 views

CVE-2018-12575

On TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 171019 Rel.55346n devices, all actions in the web interface are affected by bypass of authentication via an HTTP request.

9.8CVSS9.5AI score0.00764EPSS

CVE•added 2018/07/02 4:29 p.m.•46 views

CVE-2018-12574

CSRF exists for all actions in the web interface on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices.

8.8CVSS8.6AI score0.00141EPSS

CVE•added 2018/07/02 4:29 p.m.•46 views

CVE-2018-12577

The Ping and Traceroute features on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow authenticated blind Command Injection.

8.8CVSS8.7AI score0.03453EPSS

CVE•added 2018/06/04 2:29 p.m.•42 views

CVE-2018-11714

An issue was discovered on TP-Link TL-WR840N v5 00000005 0.9.1 3.16 v0001.0 Build 170608 Rel.58696n and TL-WR841N v13 00000013 0.9.1 4.16 v0001.0 Build 170622 Rel.64334n devices. This issue is caused by improper session handling on the /cgi/ folder or a /cgi file. If an attacker sends a header of "...

10CVSS9.3AI score0.0594EPSS

CVE•added 2018/07/02 4:29 p.m.•42 views

CVE-2018-12576

TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow clickjacking.

4.3CVSS4.8AI score0.00278EPSS