Browse CVEs

MEDIUM 5.5 CVE-2020-12475 TP-Link Omada Controller Software 3.2.6 allows Directory Traversal for reading arbitrary files via com.tp_link.eap.web.portal.PortalController.getAdv… Omada Controller No fix yet Fix from $1,6002020-05-04 HIGH 7.2 CVE-2020-8423EPSS 9% A buffer overflow in the httpd daemon on TP-Link TL-WR841N V10 (firmware version 3.16.9) devices allows an authenticated remote attacker to execute a… Tl Wr841n Firmware No fix yet Fix from $1,9502020-04-02 CRITICAL 9.8 CVE-2020-10885EPSS 7% This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 route… Ac1750 Firmware Mitigation only Fix from $2,3002020-03-25 CRITICAL 9.8 CVE-2020-10886EPSS 6% This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 route… Ac1750 Firmware Mitigation only Fix from $2,3002020-03-25 CRITICAL 9.8 CVE-2020-10887 This vulnerability allows a firewall bypass on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not… Ac1750 Firmware Mitigation only Fix from $2,3002020-03-25 CRITICAL 9.8 CVE-2020-10888 This vulnerability allows remote attackers to bypass authentication on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 router… Ac1750 Firmware Mitigation only Fix from $2,3002020-03-25 HIGH 8.8 CVE-2020-10884EPSS 26% This vulnerability allows network-adjacent attackers execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC175… Ac1750 Firmware No fix yet Fix from $1,9502020-03-25 HIGH 7.8 CVE-2020-10883EPSS 6% This vulnerability allows local attackers to escalate privileges on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. … Ac1750 Firmware No fix yet Fix from $1,9502020-03-25 CRITICAL 9.8 CVE-2020-10881EPSS 11% This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 route… Ac1750 Firmware Mitigation only Fix from $2,3002020-03-25 HIGH 8.8 CVE-2020-10882EPSS 41% This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC… Ac1750 Firmware No fix yet Fix from $1,9502020-03-25 HIGH 7.5 CVE-2020-9375EPSS 27% TP-Link Archer C50 V3 devices before Build 200318 Rel. 62209 allows remote attackers to cause a denial of service via a crafted HTTP Header containin… Archer C50 No fix yet Fix from $1,9502020-03-25 CRITICAL 9.8 CVE-2020-9374EPSS 42% On TP-Link TL-WR849N 0.9.1 4.16 devices, a remote command execution vulnerability in the diagnostics area can be exploited when an attacker sends spe… Tl Wr849n Firmware No fix yet Fix from $2,3002020-02-24 HIGH 7.5 CVE-2013-2646 TP-LINK TL-WR1043ND V1_120405 devices contain an unspecified denial of service vulnerability. Tl Wr1043nd Firmware No fix yet Fix from $1,9502020-02-03 MEDIUM 6.1 CVE-2019-19143 TP-LINK TL-WR849N 0.9.1 4.16 devices do not require authentication to replace the firmware via a POST request to the cgi/softup URI. Tl Wr849n Firmware No fix yet Fix from $1,6002020-01-27 HIGH 8.8 CVE-2019-17147EPSS 14% This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-LINK TL-WR841N routers. Authentication is not re… Tl Wr841n Firmware Mitigation only Fix from $1,9502020-01-07 CRITICAL 9.8 CVE-2013-4654 Symlink Traversal vulnerability in TP-LINK TL-WDR4300 and TL-1043ND.. Tl Wdr4300 Firmware No fix yet Fix from $2,3002019-11-13 HIGH 8.8 CVE-2013-4848 TP-Link TL-WDR4300 version 3.13.31 has multiple CSRF vulnerabilities. Tl Wdr4300 Firmware No fix yet Fix from $1,9502019-10-25 HIGH 8.8 CVE-2019-13266 TP-Link Archer C3200 V1 and Archer C2 V1 devices have Insufficient Compartmentalization between a host network and a guest network that are establish… Archer C3200 V1 Firmware No fix yet Fix from $1,9502019-08-27 HIGH 8.8 CVE-2019-13267 TP-Link Archer C3200 V1 and Archer C2 V1 devices have Insufficient Compartmentalization between a host network and a guest network that are establish… Archer C3200 V1 Firmware No fix yet Fix from $1,9502019-08-27 HIGH 8.8 CVE-2019-13268 TP-Link Archer C3200 V1 and Archer C2 V1 devices have Insufficient Compartmentalization between a host network and a guest network that are establish… Archer C3200 V1 Firmware No fix yet Fix from $1,9502019-08-27 CRITICAL 9.8 CVE-2019-13614 CMD_SET_CONFIG_COUNTRY in the TP-Link Device Debug protocol in TP-Link Archer C1200 1.0.0 Build 20180502 rel.45702 and earlier is prone to a stack-ba… Archer C1200 Firmware No fix yet Fix from $2,3002019-07-17 CRITICAL 9.8 CVE-2019-13613 CMD_FTEST_CONFIG in the TP-Link Device Debug protocol in TP-Link Wireless Router Archer Router version 1.0.0 Build 20180502 rel.45702 (EU) and earlie… Archer C1200 Firmware No fix yet Fix from $2,3002019-07-17 HIGH 7.2 CVE-2018-16119EPSS 34% Stack-based buffer overflow in the httpd server of TP-Link WR1043nd (Firmware Version 3) allows remote attackers to execute arbitrary code via a mali… Tl Wr1043nd Firmware No fix yet Fix from $1,9502019-06-20 CRITICAL 9.8 CVE-2019-6971EPSS 14% An issue was discovered on TP-Link TL-WR1043ND V2 devices. An attacker can send a cookie in an HTTP authentication packet to the router management we… Tl Wr1043nd Firmware No fix yet Fix from $2,3002019-06-19 HIGH 7.5 CVE-2019-6972 An issue was discovered on TP-Link TL-WR1043ND V2 devices. The credentials can be easily decoded and cracked by brute-force, WordList, or Rainbow Tab… Tl Wr1043nd Firmware No fix yet Fix from $1,9502019-06-19 HIGH 8.8 CVE-2019-6989EPSS 12% TP-Link TL-WR940N is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the ipAddrDispose function. By sending specia… Tl Wr940n Firmware No fix yet Fix from $1,9502019-06-06 MEDIUM 6.1 CVE-2016-10719 TP-Link Archer CR-700 1.0.6 devices have an XSS vulnerability that can be introduced into the admin account through a DHCP request, allowing the atta… Archer Cr700 Firmware No fix yet Fix from $1,6002019-05-15 HIGH 7.5 CVE-2018-15840 TP-Link TL-WR840N devices allow remote attackers to cause a denial of service (networking outage) via fragmented packets, as demonstrated by an "nmap… Tl Wr840n Firmware No fix yet Fix from $1,9502019-03-29 MEDIUM 5.4 CVE-2018-20372 TP-Link TD-W8961ND devices allow XSS via the hostname of a DHCP client. Td W8961nd Firmware No fix yet Fix from $1,6002018-12-23 HIGH 7.2 CVE-2018-3951 An exploitable remote code execution vulnerability exists in the HTTP header-parsing function of the TP-Link TL-R600VPN HTTP Server. A specially craf… Tl R600vpn Firmware No fix yet Fix from $1,9502018-12-01