Vulnerability Spotlight: Multiple remote vulnerabilities in TP-Link TL-R600VPN

🗓️ 19 Nov 2018 06:30:00Reported by [email protected] (Vitor Ventura)Type

talosblog🔗 feedproxy.google.com👁 85 Views

Vulnerabilities in TP-Link TL-R600VPN router, including denial of service, information disclosure, and remote code execution due to input sanitisation and parsing errors, allowing unauthenticated access to sensitive files and directories

Reporter	Title	Published	Views	Family All 49
ATTACKERKB	CVE-2018-3949	1 Dec 201800:00	–	attackerkb
ATTACKERKB	CVE-2018-3948	30 Nov 201800:00	–	attackerkb
BDU FSTEC	The vulnerability of the syntax analysis function for URI identifiers of HTTP-servers of TP-Link TL-R600VPN microprogramming devices allows a perpetrator to cause a service failure.	17 Dec 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the syntax analysis function for HTTP headers of TP-Link TL-R600VPN software routers allows a hacker to execute arbitrary code.	17 Dec 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the implementation of diagnostic functions for ping and tracert in the microprogramming software of TP-Link TL-R600VPN allows a intruder to execute arbitrary code.	17 Dec 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the HTTP-server of the microprogramming-based VPN router TP-Link TL-R600VPN allows a intruder to gain unauthorized access to protected information.	17 Dec 201900:00	–	bdu_fstec
Circl	CVE-2018-3948	21 Nov 201817:54	–	circl
Circl	CVE-2018-3949	21 Nov 201817:54	–	circl
Circl	CVE-2018-3950	21 Nov 201817:54	–	circl
Circl	CVE-2018-3951	21 Nov 201817:54	–	circl