Browse CVEs

MEDIUM 5.4 CVE-2025-25427 A stored cross-site scripting (XSS) vulnerability in the upnp.htm page of the web Interface in TP-Link WR841N v14/v14.6/v14.8 <= Build 241230 Rel. 50… Wr841n Firmware after 241230 Fix from $1,6002025-04-18 CRITICAL 9.8 CVE-2024-57040 TP-Link TL-WR845N devices with firmware TL-WR845N(UN)_V4_200909 and TL-WR845N(UN)_V4_190219 was discovered to contain a hardcoded password for the ro… Tl Wr845n Firmware Mitigation only Fix from $2,3002025-02-26 HIGH 7.5 CVE-2025-25901 A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11, triggered by the dnsserver1 and dnsserver2 parameters at /userRpm/WanSlaacC… Tl Wr841nd Firmware No fix yet Fix from $1,9502025-02-13 HIGH 7.5 CVE-2025-25897 A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the 'ip' parameter at /userRpm/WanStaticIpV6CfgRpm.htm. This vulnerabili… Tl Wr841nd Firmware No fix yet Fix from $1,9502025-02-13 HIGH 7.5 CVE-2025-25898 A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the pskSecret parameter at /userRpm/WlanSecurityRpm.htm. This vulnerabil… Tl Wr841nd Firmware No fix yet Fix from $1,9502025-02-13 HIGH 8.0 CVE-2024-57357EPSS 5% An issue in TPLINK TL-WPA 8630 TL-WPA8630(US)_V2_2.0.4 Build 20230427 allows a remote attacker to execute arbitrary code via function sub_4256CC, whi… Tl Wpa8630 Firmware Mitigation only Fix from $1,9502025-02-07 HIGH 8.0 CVE-2024-54887EPSS 5% TP-Link TL-WR940N V3 and V4 with firmware 3.16.9 and earlier contain a buffer overflow via the dnsserver1 and dnsserver2 parameters at /userRpm/Wan6t… Tl Wr940n Firmware after 3.16.9 Fix from $1,9502025-01-09 CRITICAL 9.8 CVE-2024-46340 TL-WR845N(UN)_V4_201214, TP-Link TL-WR845N(UN)_V4_200909, and TL-WR845N(UN)_V4_190219 was discovered to transmit user credentials in plaintext after … Tl Wr845n Firmware Mitigation only Fix from $2,3002024-12-10 HIGH 8.0 CVE-2024-46341 TP-Link TL-WR845N(UN)_V4_190219 was discovered to transmit credentials in base64 encoded form, which can be easily decoded by an attacker executing a… Tl Wr845n Firmware Mitigation only Fix from $1,9502024-12-10 HIGH 8.0 CVE-2024-50699 TP-Link TL-WR845N(UN)_V4_201214, TL-WR845N(UN)_V4_200909 and TL-WR845N(UN)_V4_190219 were discovered to contain weak default credentials for the Admi… Tl Wr845n Firmware No fix yet Fix from $1,9502024-12-10 CRITICAL 9.8 CVE-2024-12344 A vulnerability, which was classified as critical, was found in TP-Link VN020 F3v(T) TT_V6.2.1021. This affects an unknown part of the component FTP … Vn020 F3v Firmware Mitigation only Fix from $2,3002024-12-08 HIGH 8.8 CVE-2024-12343 A vulnerability classified as critical has been found in TP-Link VN020 F3v(T) TT_V6.2.1021. Affected is an unknown function of the file /control/WANI… Vn020 F3v Firmware Mitigation only Fix from $1,9502024-12-08 HIGH 8.0 CVE-2024-48288EPSS 10% TP-Link TL-IPC42C V4.0_20211227_1.0.16 is vulnerable to command injection due to the lack of malicious code verification on both the frontend and bac… Tl Ipc42c Firmware No fix yet Fix from $1,9502024-11-21 CRITICAL 9.8 CVE-2024-11237EPSS 5% A vulnerability, which was classified as critical, has been found in TP-Link VN020 F3v(T) TT_V6.2.1021. Affected by this issue is some unknown functi… Vn020 F3v\(t\) Firmware No fix yet Fix from $2,3002024-11-15 HIGH 7.5 CVE-2024-22733 TP Link MR200 V4 Firmware version 210201 was discovered to contain a null-pointer-dereference in the web administration panel on /cgi/login via the s… Mr200 Firmware No fix yet Fix from $1,9502024-11-01 MEDIUM 6.5 CVE-2024-48710 In TP-Link TL-WDR7660 1.0, the wlanTimerRuleJsonToBin function handles the parameter string name without checking it, which can lead to stack overflo… Tl Wdr7660 Firmware No fix yet Fix from $1,6002024-10-15 MEDIUM 6.5 CVE-2024-48712 In TP-Link TL-WDR7660 1.0, the rtRuleJsonToBin function handles the parameter string name without checking it, which can lead to stack overflow vulne… Tl Wdr7660 Firmware No fix yet Fix from $1,6002024-10-15 MEDIUM 6.5 CVE-2024-48713 In TP-Link TL-WDR7660 1.0, the wacWhitelistJsonToBin function handles the parameter string name without checking it, which can lead to stack overflow… Tl Wdr7660 Firmware No fix yet Fix from $1,6002024-10-15 MEDIUM 6.5 CVE-2024-48714 In TP-Link TL-WDR7660 v1.0, the guestRuleJsonToBin function handles the parameter string name without checking it, which can lead to stack overflow v… Tl Wdr7660 Firmware No fix yet Fix from $1,6002024-10-15 MEDIUM 5.5 CVE-2024-46325 TP-Link WR740N V6 has a stack overflow vulnerability via the ssid parameter in /userRpm/popupSiteSurveyRpm.htm url. Wr740n Firmware Mitigation only Fix from $1,6002024-10-07 HIGH 8.0 CVE-2024-46486 TP-LINK TL-WDR5620 v2.3 was discovered to contain a remote code execution (RCE) vulnerability via the httpProcDataSrv function. Tl Wdr5620 Firmware No fix yet Fix from $1,9502024-10-04 HIGH 8.0 CVE-2024-46313 TP-Link WR941ND V6 has a stack overflow vulnerability in the ssid parameter in /userRpm/popupSiteSurveyRpm.htm. Wr941nd Firmware Mitigation only Fix from $1,9502024-09-30 MEDIUM 6.5 CVE-2024-9284 A vulnerability was found in TP-LINK TL-WR841ND up to 20240920. It has been rated as critical. Affected by this issue is some unknown functionality o… Tl Wr841nd Firmware Mitigation only Fix from $1,6002024-09-27 CRITICAL 9.8 CVE-2024-42815 In the TP-Link RE365 V1_180213, there is a buffer overflow vulnerability due to the lack of length verification for the USER_AGENT field in /usr/bin/… Re365 Firmware No fix yet Fix from $2,3002024-08-19 HIGH 7.2 CVE-2024-21827 A leftover debug code vulnerability exists in the cli_server debug functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.4.1 Build 20240117 Rel.… Er7206 Firmware No fix yet Fix from $1,9502024-06-25 MEDIUM 6.3 CVE-2024-37661 TP-LINK TL-7DR5130 v1.0.23 is vulnerable to forged ICMP redirect message attacks. An attacker in the same WLAN as the victim can hijack the traffic b… Tl 7dr5130 Firmware No fix yet Fix from $1,6002024-06-17 MEDIUM 6.3 CVE-2024-37662 TP-LINK TL-7DR5130 v1.0.23 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same WLAN as the victim can disconnect or hijack the tra… Tl 7dr5130 Firmware No fix yet Fix from $1,6002024-06-17 HIGH 7.5 CVE-2024-5228 TP-Link Omada ER605 Comexe DDNS Response Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-… Omada Er605 Firmware Mitigation only Fix from $1,9502024-05-23 HIGH 7.5 CVE-2024-5242 TP-Link Omada ER605 Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute … Omada Er605 Firmware Mitigation only Fix from $1,9502024-05-23 HIGH 7.5 CVE-2024-5243 TP-Link Omada ER605 Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary co… Omada Er605 Firmware Mitigation only Fix from $1,9502024-05-23