Tp Link

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-17009 1Tp Link 1Tl Wr886n Firmware Nov 21, 2024 Sep 13, 2018 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for wireless wlan_host_2g is...Show more An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for wireless wlan_host_2g isolate.Show less
CVE-2018-17008 1Tp Link 1Tl Wr886n Firmware Nov 21, 2024 Sep 13, 2018 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for wireless wlan_host_2g po...Show more An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for wireless wlan_host_2g power.Show less
CVE-2018-17007 1Tp Link 1Tl Wr886n Firmware Nov 21, 2024 Sep 13, 2018 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for wireless wlan_wds_2g ssi...Show more An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for wireless wlan_wds_2g ssid.Show less
CVE-2018-17006 1Tp Link 1Tl Wr886n Firmware Nov 21, 2024 Sep 13, 2018 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for firewall lan_manage mac2...Show more An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for firewall lan_manage mac2.Show less
CVE-2018-17005 1Tp Link 1Tl Wr886n Firmware Nov 21, 2024 Sep 13, 2018 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for firewall dmz enable.
CVE-2018-17004 1Tp Link 1Tl Wr886n Firmware Nov 21, 2024 Sep 13, 2018 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for wlan_access name.
CVE-2018-15172 1Tp Link 1Tl Wr840n Firmware Nov 21, 2024 Aug 15, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 TP-Link WR840N devices have a buffer overflow via a long Authorization HTTP header.
CVE-2018-14336 1Tp Link 1Wr840n Nov 21, 2024 Jul 19, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 TP-Link WR840N devices allow remote attackers to cause a denial of service (connectivity loss) via a series of packets with random MAC addresses.
CVE-2018-13134 1Tp Link 1Archer C1200 Firmware Nov 21, 2024 Jul 4, 2018 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 TP-Link Archer C1200 1.13 Build 2018/01/24 rel.52299 EU devices have XSS via the PATH_INFO to the /webpages/data URI.
CVE-2018-12577 1Tp Link 1Tl Wr841n Firmware Nov 21, 2024 Jul 2, 2018 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 The Ping and Traceroute features on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow authenticated blind Command Injection.
CVE-2018-12576 1Tp Link 1Tl Wr841n Firmware Nov 21, 2024 Jul 2, 2018 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow clickjacking.
CVE-2018-12575 1Tp Link 1Tl Wr841n Firmware Nov 21, 2024 Jul 2, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 On TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 171019 Rel.55346n devices, all actions in the web interface are affected by bypass of authentication via an HTTP request.
CVE-2018-12574 1Tp Link 1Tl Wr841n Firmware Nov 21, 2024 Jul 2, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 CSRF exists for all actions in the web interface on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices.
CVE-2018-12694 1Tp Link 1Tl Wa850re Firmware Nov 21, 2024 Jun 23, 2018 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote attackers to cause a denial of service (reboot) via data/reboot.json.
CVE-2018-12693 1Tp Link 1Tl Wa850re Firmware Nov 21, 2024 Jun 23, 2018 N/A· v4 6.5 MEDIUM· v3 6.8 MEDIUM· v2 Stack-based buffer overflow in TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote authenticated users to cause a denial of service (outage) via a long type parameter to /data/syslog.filter.json...Show more Stack-based buffer overflow in TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote authenticated users to cause a denial of service (outage) via a long type parameter to /data/syslog.filter.json.Show less
CVE-2018-12692 1Tp Link 1Tl Wa850re Firmware Nov 21, 2024 Jun 23, 2018 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the wps_setup_pin parameter to /data/wps.setup.json.
CVE-2018-11714 1Tp Link 2Tl Wr840n Firmware Tl Wr841n Firmware Nov 21, 2024 Jun 4, 2018 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 An issue was discovered on TP-Link TL-WR840N v5 00000005 0.9.1 3.16 v0001.0 Build 170608 Rel.58696n and TL-WR841N v13 00000013 0.9.1 4.16 v0001.0 Build 170622 Rel.64334n devices. This issue is caused by improper session...Show more An issue was discovered on TP-Link TL-WR840N v5 00000005 0.9.1 3.16 v0001.0 Build 170608 Rel.58696n and TL-WR841N v13 00000013 0.9.1 4.16 v0001.0 Build 170622 Rel.64334n devices. This issue is caused by improper session handling on the /cgi/ folder or a /cgi file. If an attacker sends a header of "Referer: http://192.168.0.1/mainFrame.htm" then no authentication is required for any action.Show less
CVE-2018-11482 1Tp Link 4Ipc Tl Ipc223(p) 6 Firmware Tl Ipc323k D FirmwareTl Ipc325(kp) Firmware+1 more Nov 21, 2024 May 30, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 /usr/lib/lua/luci/websys.lua on TP-LINK IPC TL-IPC223(P)-6, TL-IPC323K-D, TL-IPC325(KP)-*, and TL-IPC40A-4 devices has a hardcoded zMiVw8Kw0oxKXL0 password.
CVE-2018-11481 1Tp Link 4Ipc Tl Ipc223(p) 6 Firmware Tl Ipc323k D FirmwareTl Ipc325(kp) Firmware+1 more Nov 21, 2024 May 30, 2018 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 TP-LINK IPC TL-IPC223(P)-6, TL-IPC323K-D, TL-IPC325(KP)-, and TL-IPC40A-4 devices allow authenticated remote code execution via crafted JSON data because /usr/lib/lua/luci/torchlight/validator.lua does not block various...Show more TP-LINK IPC TL-IPC223(P)-6, TL-IPC323K-D, TL-IPC325(KP)-, and TL-IPC40A-4 devices allow authenticated remote code execution via crafted JSON data because /usr/lib/lua/luci/torchlight/validator.lua does not block various punctuation characters.Show less
CVE-2018-10168 1Tp Link 1Eap Controller Nov 21, 2024 May 3, 2018 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows do not control privileges for usage of the Web API, allowing a low-privilege user to make any request as an Administrator. This is fixed in...Show more TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows do not control privileges for usage of the Web API, allowing a low-privilege user to make any request as an Administrator. This is fixed in version 2.6.1_Windows.Show less

Previous 1...232425...28 Next