Browse CVEs

HIGH 7.7 CVE-2023-36357 An issue in the /userRpm/LocalManageControlRpm component of TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8/V10, and TL-WR941ND V5 allows attackers to cause… Tl Wr940n Firmware No fix yet Fix from $1,9502023-06-22 HIGH 7.7 CVE-2023-36358 TP-Link TL-WR940N V2/V3/V4, TL-WR941ND V5/V6, TL-WR743ND V1 and TL-WR841N V8 were discovered to contain a buffer overflow in the component /userRpm/A… Tl Wr940n Firmware No fix yet Fix from $1,9502023-06-22 HIGH 7.5 CVE-2023-36354 TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR740N V1/V2, TL-WR940N V2/V3, and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the co… Tl Wr940n Firmware No fix yet Fix from $1,9502023-06-22 HIGH 7.5 CVE-2023-36359 TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR940N V2/V3 and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component /userRpm/Q… Tl Wr940n Firmware No fix yet Fix from $1,9502023-06-22 CRITICAL 9.8 CVE-2023-34832 TP-Link Archer AX10(EU)_V1.2_230220 was discovered to contain a buffer overflow via the function FUN_131e8 - 0x132B4. Archer Ax10 Firmware Mitigation only Fix from $2,3002023-06-16 CRITICAL 9.8 CVE-2023-29562 TP-Link TL-WPA7510 (EU)_V2_190125 was discovered to contain a stack overflow via the operation parameter at /admin/locale. Tl Wpa7510 Firmware No fix yet Fix from $2,3002023-06-13 CRITICAL 9.8 CVE-2023-27836 TP-Link TL-WPA8630P (US)_ V2_ Version 171011 was discovered to contain a command injection vulnerability via the devicePwd parameter in the function … Tl Wpa8630p Firmware No fix yet Fix from $2,3002023-06-13 CRITICAL 9.8 CVE-2023-27837 TP-Link TL-WPA8630P (US)_ V2_ Version 171011 was discovered to contain a command injection vulnerability via the key parameter in the function sub_ 4… Tl Wpa8630p Firmware No fix yet Fix from $2,3002023-06-13 HIGH 8.8 CVE-2023-33538 KEVEPSS 42% TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerability via the component /userRpm… Tl Wr940n Firmware Mitigation only Fix from $1,9502023-06-07 HIGH 8.1 CVE-2023-33536 TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a buffer overflow via the component /userRpm/WlanMacFilterRp… Tl Wr940n Firmware No fix yet Fix from $1,9502023-06-07 HIGH 8.1 CVE-2023-33537 TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a buffer overflow via the component /userRpm/FixMapCfgRpm. Tl Wr940n Firmware No fix yet Fix from $1,9502023-06-07 HIGH 8.8 CVE-2023-31700 TP-Link TL-WPA4530 KIT V2 (EU)_170406 and V2 (EU)_161115 is vulnerable to Command Injection via _httpRpmPlcDeviceAdd. Tl Wpa4530 Kit Firmware No fix yet Fix from $1,9502023-05-17 HIGH 8.8 CVE-2023-31701 TP-Link TL-WPA4530 KIT V2 (EU)_170406 and V2 (EU)_161115 is vulnerable to Command Injection via _httpRpmPlcDeviceRemove. Tl Wpa4530 Kit Firmware No fix yet Fix from $1,9502023-05-17 HIGH 7.5 CVE-2022-37255 TP-Link Tapo C310 1.3.0 devices allow access to the RTSP video feed via credentials of User --- and Password TPL075526460603. Tapo C310 Firmware No fix yet Fix from $1,9502023-04-16 MEDIUM 5.7 CVE-2023-28368 TP-Link L2 switch T2600G-28SQ firmware versions prior to 'T2600G-28SQ(UN)_V1_1.0.6 Build 20230227' uses vulnerable SSH host keys. A fake device may b… T2600g 28sq Firmware Mitigation only Fix from $1,6002023-04-11 HIGH 8.8 CVE-2022-43636 This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of TP-Link TL-WR940N 6_211111 3.20.1(US) rout… Tl Wr940n Firmware Mitigation only Fix from $1,9502023-03-29 MEDIUM 6.5 CVE-2022-43635 This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR940N 6_211111 3.20.1… Tl Wr940n Firmware Mitigation only Fix from $1,6002023-03-29 HIGH 8.0 CVE-2022-24973 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel… Tl Wr940n Firmware Mitigation only Fix from $1,9502023-03-28 MEDIUM 6.5 CVE-2022-24972 This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR940N 3.20.1 Build 20… Tl Wr940n Firmware Mitigation only Fix from $1,6002023-03-28 CRITICAL 9.8 CVE-2023-27078 A command injection issue was found in TP-Link MR3020 v.1_150921 that allows a remote attacker to execute arbitrary commands via a crafted request to… Tl Mr3020 Firmware No fix yet Fix from $2,3002023-03-23 MEDIUM 6.5 CVE-2023-0936 A vulnerability was found in TP-Link Archer C50 V2_160801. It has been rated as problematic. Affected by this issue is some unknown functionality of … Archer C50 No fix yet Fix from $1,6002023-02-21 MEDIUM 6.4 CVE-2022-41505 An access control issue on TP-LInk Tapo C200 V1 devices allows physically proximate attackers to obtain root access by connecting to the UART pins, i… Tapo C200 V1 Firmware No fix yet Fix from $1,6002023-01-23 HIGH 8.0 CVE-2021-37774 An issue was discovered in function httpProcDataSrv in TL-WDR7660 2.0.30 that allows attackers to execute arbitrary code. Tl Wdr7660 Firmware No fix yet Fix from $1,9502023-01-19 CRITICAL 9.8 CVE-2023-22303 TP-Link SG105PE firmware prior to 'TL-SG105PE(UN) 1.0_1.0.0 Build 20221208' contains an authentication bypass vulnerability. Under the certain condit… Tl Sg105pe Firmware Mitigation only Fix from $2,3002023-01-17 CRITICAL 9.8 CVE-2022-4498 In TP-Link routers, Archer C5 and WR710N-V1, running the latest available code, when receiving HTTP Basic Authentication the httpd service can be sen… Archer C5 Firmware Mitigation only Fix from $2,3002023-01-11 HIGH 7.5 CVE-2022-4499 TP-Link routers, Archer C5 and WR710N-V1, using the latest software, the strcmp function used for checking credentials in httpd, is susceptible to a … Archer C5 Firmware Mitigation only Fix from $1,9502023-01-11 MEDIUM 5.5 CVE-2022-4296 A vulnerability classified as problematic has been found in TP-Link TL-WR740N. Affected is an unknown function of the component ARP Handler. The mani… Tl Wr740n Firmware No fix yet Fix from $1,6002022-12-06 HIGH 8.1 CVE-2022-41541 TP-Link AX10v1 V1_211117 allows attackers to execute a replay attack by using a previously transmitted encrypted authentication message and valid aut… Ax10 Firmware No fix yet Fix from $1,9502022-10-18 MEDIUM 5.9 CVE-2022-41540 The web app client of TP-Link AX10v1 V1_211117 uses hard-coded cryptographic keys when communicating with the router. Attackers who are able to inter… Ax10 Firmware No fix yet Fix from $1,6002022-10-18 MEDIUM 6.1 CVE-2022-42202 TP-Link TL-WR841N 8.0 4.17.16 Build 120201 Rel.54750n is vulnerable to Cross Site Scripting (XSS). Tl Wr841n Firmware No fix yet Fix from $1,6002022-10-18