Browse CVEs

CRITICAL 9.8 CVE-2021-44630 A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloud_config/router_post/modify_account_pwd feature, which allows ma… Tl Wr886n Firmware No fix yet Fix from $2,3002022-03-10 CRITICAL 9.8 CVE-2021-44631 A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloud_config/router_post/reset_cloud_pwd feature, which allows malic… Tl Wr886n Firmware No fix yet Fix from $2,3002022-03-10 CRITICAL 9.8 CVE-2021-44629 A Buffer Overflow vulnerabilitiy exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloud_config/router_post/register feature, which allows malicious u… Tl Wr886n Firmware No fix yet Fix from $2,3002022-03-10 CRITICAL 9.8 CVE-2021-44627 A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloud_config/router_post/get_reset_pwd_veirfy_code feature, which al… Tl Wr886n Firmware No fix yet Fix from $2,3002022-03-10 CRITICAL 9.8 CVE-2021-44628 A Buffer Overflow vulnerabiltiy exists in TP-LINK WR-886N 20190826 2.3.8 in thee /cloud_config/router_post/login feature, which allows malicious user… Tl Wr886n Firmware No fix yet Fix from $2,3002022-03-10 CRITICAL 9.8 CVE-2021-44626 A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloud_config/router_post/get_reg_verify_code feature, which allows m… Tl Wr886n Firmware No fix yet Fix from $2,3002022-03-10 CRITICAL 9.8 CVE-2021-44623 A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 via the /cloud_config/router_post/check_reset_pwd_verify_code interface. Tl Wr886n Firmware No fix yet Fix from $2,3002022-03-10 CRITICAL 9.8 CVE-2021-44625 A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in /cloud_config/cloud_device/info interface, which allows a malicious user … Tl Wr886n Firmware No fix yet Fix from $2,3002022-03-10 CRITICAL 9.8 CVE-2021-44622 A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloud_config/router_post/check_reg_verify_code function which could … Tl Wr886n Firmware No fix yet Fix from $2,3002022-03-10 HIGH 7.5 CVE-2021-44032 TP-Link Omada SDN Software Controller before 5.0.15 does not check if the authentication method specified in a connection request is allowed. An atta… Omada Software Controller 5.0.15+ Fix from $1,9502022-03-10 HIGH 8.8 CVE-2021-44827EPSS 54% There is remote authenticated OS command injection on TP-Link Archer C20i 0.9.1 3.2 v003a.0 Build 170221 Rel.55462n devices vie the X_TP_ExternalIPv6… Archer C20i Firmware after 170221 Fix from $1,9502022-03-04 CRITICAL 9.8 CVE-2022-25060EPSS 40% TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_startPing. Tl Wr840n Firmware Mitigation only Fix from $2,3002022-02-25 CRITICAL 9.8 CVE-2022-25061EPSS 58% TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_setIp6DefaultRoute. Tl Wr840n Firmware Mitigation only Fix from $2,3002022-02-25 CRITICAL 9.8 CVE-2022-25064EPSS 36% TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a remote code execution (RCE) vulnerability via the function oal_wan6_setIpAddr. Tl Wr840n Firmware Mitigation only Fix from $2,3002022-02-25 HIGH 7.5 CVE-2022-25062 TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain an integer overflow via the function dm_checkString. This vulnerability allows attackers… Tl Wr840n Firmware Mitigation only Fix from $1,9502022-02-25 CRITICAL 9.8 CVE-2022-25072EPSS 13% TP-Link Archer A54 Archer A54(US)_V1_210111 routers were discovered to contain a stack overflow in the function DM_ Fillobjbystr(). This vulnerabilit… Archer A54 Firmware No fix yet Fix from $2,3002022-02-24 CRITICAL 9.8 CVE-2022-25073EPSS 13% TL-WR841Nv14_US_0.9.1_4.18 routers were discovered to contain a stack overflow in the function dm_fillObjByStr(). This vulnerability allows unauthent… Tl Wr841n Firmware No fix yet Fix from $2,3002022-02-24 CRITICAL 9.8 CVE-2022-25074EPSS 13% TP-Link TL-WR902AC(US)_V3_191209 routers were discovered to contain a stack overflow in the function DM_ Fillobjbystr(). This vulnerability allows un… Tl Wr902ac Firmware No fix yet Fix from $2,3002022-02-24 HIGH 8.8 CVE-2022-24354 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1750 prior to 1.1.4 Build 20211… Ac1750 Firmware 211210+ Fix from $1,9502022-02-18 HIGH 8.8 CVE-2022-24355 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel… Tl Wr940n Firmware 211111+ Fix from $1,9502022-02-18 CRITICAL 9.8 CVE-2022-22922 TP-Link TL-WA850RE Wi-Fi Range Extender before v6_200923 was discovered to use highly predictable and easily detectable session keys, allowing attack… Tl Wa850re Firmware No fix yet Fix from $2,3002022-02-18 CRITICAL 9.8 CVE-2022-0162 The vulnerability exists in TP-Link TL-WR841N V11 3.16.9 Build 160325 Rel.62500n wireless router due to transmission of authentication information in… Tl Wr841n Firmware Mitigation only Fix from $2,3002022-02-09 MEDIUM 6.5 CVE-2021-44864EPSS 10% TP-Link WR886N 3.0 1.0.1 Build 150127 Rel.34123n is vulnerable to Buffer Overflow. Authenticated attackers can crash router httpd services via /userR… Wn886n Firmware No fix yet Fix from $1,6002022-02-08 CRITICAL 9.8 CVE-2021-35003EPSS 8% This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer C90 1.0.6 Build 20200114 rel.73164(5… Archer C90 Firmware Mitigation only Fix from $2,3002022-01-21 CRITICAL 9.8 CVE-2021-35004EPSS 8% This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link TL-WA1201 1.0.1 Build 20200709 rel.66244(55… Tl Wa1201 Firmware Mitigation only Fix from $2,3002022-01-21 HIGH 8.8 CVE-2021-4144 TP-Link wifi router TL-WR802N V4(JP), with firmware version prior to 211202, is vulnerable to OS command injection. Tl Wr802n Firmware 211202+ Fix from $1,9502021-12-23 HIGH 7.5 CVE-2021-41451 A misconfiguration in HTTP/1.0 and HTTP/1.1 of the web interface in TP-Link AX10v1 before V1_211117 allows a remote unauthenticated attacker to send … Archer Ax10 Firmware Mitigation only Fix from $1,9502021-12-17 HIGH 7.5 CVE-2021-41450 An HTTP request smuggling attack in TP-Link AX10v1 before v1_211117 allows a remote unauthenticated attacker to DoS the web application via sending a… Archer Ax10 V1 Firmware 211117+ Fix from $1,9502021-12-08 HIGH 7.5 CVE-2021-40288 A denial-of-service attack in WPA2, and WPA3-SAE authentication methods in TP-Link AX10v1 before V1_211014, allows a remote unauthenticated attacker … Archer Ax10 Firmware Patch available Fix from $1,9502021-12-07 CRITICAL 9.8 CVE-2021-41653EPSS 76% The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840N(EU)_V5_171211 is vulnerable to remote code execution via a cr… Tl Wr840n Firmware Mitigation only Fix from $2,3002021-11-13