Browse CVEs

HIGH 8.8 CVE-2023-43137 TPLINK TL-ER5120G 4.0 2.0.0 Build 210817 Rel.80868n has a command injection vulnerability, when an attacker adds ACL rules after authentication, and … Tl Er5120g Firmware No fix yet Fix from $1,9502023-09-20 HIGH 8.8 CVE-2023-43138 TPLINK TL-ER5120G 4.0 2.0.0 Build 210817 Rel.80868n has a command injection vulnerability, when an attacker adds NAPT rules after authentication, and… Tl Er5120g Firmware No fix yet Fix from $1,9502023-09-20 HIGH 8.0 CVE-2023-40531 Archer AX6000 firmware versions prior to 'Archer AX6000(JP)_V1_1.3.0 Build 20221208' allows a network-adjacent authenticated attacker to execute arbi… Archer Ax6000 Firmware 1.3.0+ Fix from $1,9502023-09-06 HIGH 8.8 CVE-2023-38563 Archer C1200 firmware versions prior to 'Archer C1200(JP)_V2_230508' and Archer C9 firmware versions prior to 'Archer C9(JP)_V3_230508' allow a netwo… Archer C1200 Firmware 230508+ Fix from $1,9502023-09-06 HIGH 8.8 CVE-2023-38568 Archer A10 firmware versions prior to 'Archer A10(JP)_V2_230504' allows a network-adjacent unauthenticated attacker to execute arbitrary OS commands. Archer A10 Firmware 230504+ Fix from $1,9502023-09-06 HIGH 8.0 CVE-2023-38588 Archer C3150 firmware versions prior to 'Archer C3150(JP)_V2_230511' allows a network-adjacent authenticated attacker to execute arbitrary OS command… Archer C3150 Firmware 230511+ Fix from $1,9502023-09-06 HIGH 8.0 CVE-2023-39224 Archer C5 firmware all versions and Archer C7 firmware versions prior to 'Archer C7(JP)_V2_230602' allow a network-adjacent authenticated attacker to… Archer C7 Firmware 230602+ Fix from $1,9502023-09-06 HIGH 8.0 CVE-2023-39935 Archer C5400 firmware versions prior to 'Archer C5400(JP)_V2_230506' allows a network-adjacent authenticated attacker to execute arbitrary OS command… Archer C5400 Firmware 230506+ Fix from $1,9502023-09-06 HIGH 8.0 CVE-2023-40193 Deco M4 firmware versions prior to 'Deco M4(JP)_V2_1.5.8 Build 20230619' allows a network-adjacent authenticated attacker to execute arbitrary OS com… Deco M4 Firmware 1.5.8+ Fix from $1,9502023-09-06 HIGH 8.0 CVE-2023-40357 Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows… Archer Ax50 Firmware 230508 / 230523+ Fix from $1,9502023-09-06 HIGH 8.8 CVE-2023-32619 Archer C50 firmware versions prior to 'Archer C50(JP)_V3_230505' and Archer C55 firmware versions prior to 'Archer C55(JP)_V1_230506' use hard-coded … Archer C55 Firmware 230505 / 230506+ Fix from $1,9502023-09-06 HIGH 8.8 CVE-2023-36489 Multiple TP-LINK products allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands. Affected products/versions are as follo… Tl Wr902ac Firmware 221008 / 230506+ Fix from $1,9502023-09-06 HIGH 8.8 CVE-2023-37284 Improper authentication vulnerability in Archer C20 firmware versions prior to 'Archer C20(JP)_V1_230616' allows a network-adjacent unauthenticated a… Archer C20 Firmware 230616+ Fix from $1,9502023-09-06 HIGH 8.0 CVE-2023-31188 Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows… Archer C55 Firmware 230505 / 230506+ Fix from $1,9502023-09-06 MEDIUM 6.5 CVE-2023-38908 An issue in TPLink Smart Bulb Tapo series L530 before 1.2.4, L510E before 1.1.0, L630 before 1.0.4, P100 before 1.5.0, and Tapo Application 2.8.14 al… Tapo Mitigation only Fix from $1,6002023-08-22 MEDIUM 6.5 CVE-2023-38909 An issue in TPLink Smart Bulb Tapo series L530 before 1.2.4, L510E before 1.1.0, L630 before 1.0.4, P100 before 1.5.0, and Tapo Application 2.8.14 al… Tapo No fix yet Fix from $1,6002023-08-22 MEDIUM 6.5 CVE-2023-38906 An issue in TPLink Smart Bulb Tapo series L530 1.1.9, L510E 1.0.8, L630 1.0.3, P100 1.4.9, Smart Camera Tapo series C200 1.1.18, and Tapo Application… Tapo Mitigation only Fix from $1,6002023-08-22 CRITICAL 9.8 CVE-2023-39747EPSS 8% TP-Link WR841N V8, TP-Link TL-WR940N V2, and TL-WR941ND V5 were discovered to contain a buffer overflow via the radiusSecret parameter at /userRpm/Wl… Tl Wr940n V2 Firmware No fix yet Fix from $2,3002023-08-21 CRITICAL 9.8 CVE-2023-39751EPSS 8% TP-Link TL-WR941ND V6 were discovered to contain a buffer overflow via the pSize parameter at /userRpm/PingIframeRpm. Tl Wr941nd V6 Firmware No fix yet Fix from $2,3002023-08-21 HIGH 7.5 CVE-2023-39745 TP-Link TL-WR940N V2, TP-Link TL-WR941ND V5 and TP-Link TL-WR841N V8 were discovered to contain a buffer overflow via the component /userRpm/AccessCt… Tl Wr940n V2 Firmware No fix yet Fix from $1,9502023-08-21 HIGH 7.5 CVE-2023-39748 An issue in the component /userRpm/NetworkCfgRpm of TP-Link TL-WR1041N V2 allows attackers to cause a Denial of Service (DoS) via a crafted GET reque… Tl Wr1041n V2 Firmware No fix yet Fix from $1,9502023-08-21 CRITICAL 9.8 CVE-2023-31710 TP-Link Archer AX21(US)_V3_1.1.4 Build 20230219 and AX21(US)_V3.6_1.1.4 Build 20230219 are vulnerable to Buffer Overflow. Archer Ax21 Firmware No fix yet Fix from $2,3002023-08-01 HIGH 7.5 CVE-2023-30383 TP-LINK Archer C50v2 Archer C50(US)_V2_160801, TP-LINK Archer C20v1 Archer_C20_V1_150707, and TP-LINK Archer C2v1 Archer_C2_US__V1_170228 were discov… Archer C2 V1 Firmware Mitigation only Fix from $1,9502023-07-18 CRITICAL 9.9 CVE-2023-36355EPSS 32% TP-Link TL-WR940N V4 was discovered to contain a buffer overflow via the ipStart parameter at /userRpm/WanDynamicIpV6CfgRpm. This vulnerability allow… Tl Wr940n Firmware No fix yet Fix from $2,3002023-06-22 HIGH 7.7 CVE-2023-36356 TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8, TL-WR941ND V5, and TL-WR740N V1/V2 were discovered to contain a buffer read out-of-bounds via the component… Tl Wr940n Firmware No fix yet Fix from $1,9502023-06-22 HIGH 7.7 CVE-2023-36357 An issue in the /userRpm/LocalManageControlRpm component of TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8/V10, and TL-WR941ND V5 allows attackers to cause… Tl Wr940n Firmware No fix yet Fix from $1,9502023-06-22 HIGH 7.7 CVE-2023-36358 TP-Link TL-WR940N V2/V3/V4, TL-WR941ND V5/V6, TL-WR743ND V1 and TL-WR841N V8 were discovered to contain a buffer overflow in the component /userRpm/A… Tl Wr940n Firmware No fix yet Fix from $1,9502023-06-22 HIGH 7.5 CVE-2023-36354 TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR740N V1/V2, TL-WR940N V2/V3, and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the co… Tl Wr940n Firmware No fix yet Fix from $1,9502023-06-22 HIGH 7.5 CVE-2023-36359 TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR940N V2/V3 and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component /userRpm/Q… Tl Wr940n Firmware No fix yet Fix from $1,9502023-06-22 CRITICAL 9.8 CVE-2023-34832 TP-Link Archer AX10(EU)_V1.2_230220 was discovered to contain a buffer overflow via the function FUN_131e8 - 0x132B4. Archer Ax10 Firmware Mitigation only Fix from $2,3002023-06-16