Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
Tp-linkTl-wr940n Firmware

19 matches found

CVE
CVE•added 2019/06/06 6:29 p.m.•231 views

CVE-2019-6989

TP-Link TL-WR940N is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the ipAddrDispose function. By sending specially crafted ICMP echo request packets, a remote authenticated attacker could overflow a buffer and execute arbitrary code on the system with elevated ...

9CVSS8.9AI score0.1986EPSS
CVE
CVE•added 2023/06/07 4:15 a.m.•208 views

CVE-2023-33538

TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerability via the component /userRpm/WlanNetworkRpm .

8.8CVSS8.9AI score0.915EPSS
CVE
CVE•added 2023/06/07 4:15 a.m.•171 views

CVE-2023-33536

TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a buffer overflow via the component /userRpm/WlanMacFilterRpm.

8.1CVSS8.3AI score0.00125EPSS
CVE
CVE•added 2023/06/07 4:15 a.m.•132 views

CVE-2023-33537

TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a buffer overflow via the component /userRpm/FixMapCfgRpm.

8.1CVSS8.3AI score0.00125EPSS
CVE
CVE•added 2022/02/18 8:15 p.m.•95 views

CVE-2022-24355

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n (5553) routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of file name extensi...

8.8CVSS8.8AI score0.00369EPSS
CVE
CVE•added 2025/01/09 8:15 p.m.•81 views

CVE-2024-54887

TP-Link TL-WR940N V3 and V4 with firmware 3.16.9 and earlier contain a buffer overflow via the dnsserver1 and dnsserver2 parameters at /userRpm/Wan6to4TunnelCfgRpm.htm. This vulnerability allows an authenticated attacker to execute arbitrary code on the remote device in the context of the root user...

8CVSS8.5AI score0.00069EPSS
CVE
CVE•added 2023/03/28 7:15 p.m.•75 views

CVE-2022-0650

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n (5553) routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on ...

8CVSS7.4AI score0.00022EPSS
CVE
CVE•added 2023/03/28 7:15 p.m.•59 views

CVE-2022-24973

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n (5553) routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on ...

8CVSS7.4AI score0.00022EPSS
CVE
CVE•added 2023/03/29 7:15 p.m.•57 views

CVE-2022-43636

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of TP-Link TL-WR940N 6_211111 3.20.1(US) routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by ...

8.8CVSS8AI score0.00029EPSS
CVE
CVE•added 2023/03/28 7:15 p.m.•51 views

CVE-2022-24972

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n (5553) routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which...

6.5CVSS6.2AI score0.00041EPSS
CVE
CVE•added 2023/06/22 8:15 p.m.•41 views

CVE-2023-36357

An issue in the /userRpm/LocalManageControlRpm component of TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8/V10, and TL-WR941ND V5 allows attackers to cause a Denial of Service (DoS) via a crafted GET request.

7.7CVSS7.2AI score0.0009EPSS
CVE
CVE•added 2023/03/29 7:15 p.m.•39 views

CVE-2022-43635

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR940N 6_211111 3.20.1(US) routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP po...

6.5CVSS6.3AI score0.00102EPSS
CVE
CVE•added 2023/06/22 8:15 p.m.•38 views

CVE-2023-36358

TP-Link TL-WR940N V2/V3/V4, TL-WR941ND V5/V6, TL-WR743ND V1 and TL-WR841N V8 were discovered to contain a buffer overflow in the component /userRpm/AccessCtrlAccessTargetsRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request.

7.7CVSS7.6AI score0.00084EPSS
CVE
CVE•added 2023/02/22 5:15 p.m.•37 views

CVE-2023-23040

TP-Link router TL-WR940N V6 3.19.1 Build 180119 uses a deprecated MD5 algorithm to hash the admin password used for basic authentication.

7.5CVSS7.6AI score0.00045EPSS
CVE
CVE•added 2023/06/22 8:15 p.m.•37 views

CVE-2023-36354

TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR740N V1/V2, TL-WR940N V2/V3, and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component /userRpm/AccessCtrlTimeSchedRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request.

7.5CVSS7.6AI score0.00109EPSS
CVE
CVE•added 2023/06/22 8:15 p.m.•34 views

CVE-2023-36359

TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR940N V2/V3 and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component /userRpm/QoSRuleListRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request.

7.5CVSS7.6AI score0.00109EPSS
CVE
CVE•added 2023/06/22 8:15 p.m.•32 views

CVE-2023-36355

TP-Link TL-WR940N V4 was discovered to contain a buffer overflow via the ipStart parameter at /userRpm/WanDynamicIpV6CfgRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request.

9.9CVSS9.4AI score0.38256EPSS
CVE
CVE•added 2023/06/22 8:15 p.m.•30 views

CVE-2023-36356

TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8, TL-WR941ND V5, and TL-WR740N V1/V2 were discovered to contain a buffer read out-of-bounds via the component /userRpm/VirtualServerRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request.

7.7CVSS7.4AI score0.00068EPSS
CVE
CVE•added 2025/06/17 1:15 a.m.•20 views

CVE-2025-6151

A vulnerability has been found inTP-Link TL-WR940N V4 and TL-WR841N V11. Affected by this issue is some unknownfunctionality of the file /userRpm/WanSlaacCfgRpm.htm, which may lead to buffer overflow. The attack may belaunched remotely. This vulnerability only affects products that are no longersup...

8.2CVSS8.7AI score0.00114EPSS