Tl Wa850re Firmware

tl-wa850re_firmware

Vendor: Tp Link • 6 CVEs

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-14738 1Tp Link 1Tl Wa850re Firmware Jun 17, 2026 Dec 18, 2025 5.7 MEDIUM· v4 7.5 HIGH· v3 N/A· v2 Improper authentication vulnerability in TP-Link WA850RE (httpd modules) allows unauthenticated attackers to download the configuration file.This issue affects: ≤ WA850RE V2_160527, ≤ WA850RE V3_160922.
CVE-2025-14737 1Tp Link 1Tl Wa850re Firmware Jun 17, 2026 Dec 18, 2025 7.1 HIGH· v4 8.0 HIGH· v3 N/A· v2 Command Injection vulnerability in TP-Link WA850RE (httpd modules) allows authenticated adjacent attacker to inject arbitrary commands.This issue affects: ≤ WA850RE V2_160527, ≤ WA850RE V3_160922.
CVE-2022-22922 1Tp Link 1Tl Wa850re Firmware Jun 17, 2026 Feb 18, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 TP-Link TL-WA850RE Wi-Fi Range Extender before v6_200923 was discovered to use highly predictable and easily detectable session keys, allowing attackers to gain administrative privileges.
CVE-2018-12694 1Tp Link 1Tl Wa850re Firmware Nov 21, 2024 Jun 23, 2018 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote attackers to cause a denial of service (reboot) via data/reboot.json.
CVE-2018-12693 1Tp Link 1Tl Wa850re Firmware Nov 21, 2024 Jun 23, 2018 N/A· v4 6.5 MEDIUM· v3 6.8 MEDIUM· v2 Stack-based buffer overflow in TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote authenticated users to cause a denial of service (outage) via a long type parameter to /data/syslog.filter.json...Show more Stack-based buffer overflow in TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote authenticated users to cause a denial of service (outage) via a long type parameter to /data/syslog.filter.json.Show less
CVE-2018-12692 1Tp Link 1Tl Wa850re Firmware Nov 21, 2024 Jun 23, 2018 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the wps_setup_pin parameter to /data/wps.setup.json.