Browse CVEs

HIGH 7.5 CVE-2018-12694 TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote attackers to cause a denial of service (reboot) via data/reboot.json. Tl Wa850re Firmware No fix yet Fix from $1,9502018-06-23 MEDIUM 6.5 CVE-2018-12693EPSS 16% Stack-based buffer overflow in TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote authenticated users to cause a denial of… Tl Wa850re Firmware No fix yet Fix from $1,6002018-06-23 CRITICAL 9.8 CVE-2018-11714EPSS 35% An issue was discovered on TP-Link TL-WR840N v5 00000005 0.9.1 3.16 v0001.0 Build 170608 Rel.58696n and TL-WR841N v13 00000013 0.9.1 4.16 v0001.0 Bui… Tl Wr840n Firmware No fix yet Fix from $2,3002018-06-04 HIGH 8.8 CVE-2018-10166 The web management interface in the TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows does not have Anti-CSRF tokens i… Eap Controller No fix yet Fix from $1,9502018-05-03 HIGH 8.8 CVE-2018-10168 TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows do not control privileges for usage of the Web API, allowing a low-p… Eap Controller No fix yet Fix from $1,9502018-05-03 HIGH 7.5 CVE-2018-10167 The web application backup file in the TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows is encrypted with a hard-code… Eap Controller No fix yet Fix from $1,9502018-05-03 MEDIUM 5.4 CVE-2018-10164 Stored Cross-site scripting (XSS) vulnerability in the TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows allows authen… Eap Controller No fix yet Fix from $1,6002018-05-03 MEDIUM 5.4 CVE-2018-10165 Stored Cross-site scripting (XSS) vulnerability in the TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows allows authen… Eap Controller No fix yet Fix from $1,6002018-05-03 HIGH 7.2 CVE-2017-15627 TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-pns variable… Er5110g Firmware No fix yet Fix from $1,9502018-01-11 HIGH 7.2 CVE-2017-15628 TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the lcpechointerval … Er5110g Firmware No fix yet Fix from $1,9502018-01-11 HIGH 7.2 CVE-2017-15629 TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-tunnelname v… Er5110g Firmware No fix yet Fix from $1,9502018-01-11 HIGH 7.2 CVE-2017-15630 TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-remotesubnet… Er5110g Firmware No fix yet Fix from $1,9502018-01-11 HIGH 7.2 CVE-2017-15631 TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-workmode var… Er5110g Firmware No fix yet Fix from $1,9502018-01-11 HIGH 7.2 CVE-2017-15632 TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-mppeencrypti… Er5110g Firmware No fix yet Fix from $1,9502018-01-11 HIGH 7.2 CVE-2017-15633 TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-ipgroup vari… Er5110g Firmware No fix yet Fix from $1,9502018-01-11 HIGH 7.2 CVE-2017-15634 TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the name variable in… Er5110g Firmware No fix yet Fix from $1,9502018-01-11 HIGH 7.2 CVE-2017-15635 TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the max_conn variabl… Er5110g Firmware No fix yet Fix from $1,9502018-01-11 HIGH 7.2 CVE-2017-15636 TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-time variabl… Er5110g Firmware No fix yet Fix from $1,9502018-01-11 HIGH 7.2 CVE-2017-15637 TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the pptphellointerva… Er5110g Firmware No fix yet Fix from $1,9502018-01-11 HIGH 7.2 CVE-2017-15613 TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-interface va… Er5110g Firmware No fix yet Fix from $1,9502018-01-11 HIGH 7.2 CVE-2017-15614 TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-outif variab… Er5110g Firmware No fix yet Fix from $1,9502018-01-11 HIGH 7.2 CVE-2017-15615 TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the lcpechointerval … Er5110g Firmware No fix yet Fix from $1,9502018-01-11 HIGH 7.2 CVE-2017-15616 TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-interface va… Er5110g Firmware No fix yet Fix from $1,9502018-01-11 HIGH 7.2 CVE-2017-15617 TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the iface variable i… Er5110g Firmware No fix yet Fix from $1,9502018-01-11 HIGH 7.2 CVE-2017-15618 TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-enable varia… Er5110g Firmware No fix yet Fix from $1,9502018-01-11 HIGH 7.2 CVE-2017-15619 TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the pptphellointerva… Er5110g Firmware No fix yet Fix from $1,9502018-01-11 HIGH 7.2 CVE-2017-15620 TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-zone variabl… Er5110g Firmware No fix yet Fix from $1,9502018-01-11 HIGH 7.2 CVE-2017-15621 TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the olmode variable … Er5110g Firmware No fix yet Fix from $1,9502018-01-11 HIGH 7.2 CVE-2017-15622 TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-mppeencrypti… Er5110g Firmware No fix yet Fix from $1,9502018-01-11 HIGH 7.2 CVE-2017-15623 TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-enable varia… Er5110g Firmware No fix yet Fix from $1,9502018-01-11