tp-link Archives - CVE Vulnerability

CVE-2018-16119

Sun, 26 Feb 2023 06:46:55 +0000

Stack-based buffer overflow in the httpd server of TP-Link WR1043nd (Firmware Version 3) allows remote attackers to execute arbitrary code via a malicious MediaServer request to /userRpm/MediaServerFoldersCfgRpm.htm.

The post CVE-2018-16119 appeared first on CVE Vulnerability.

CVE-2018-15840

Sun, 26 Feb 2023 06:46:48 +0000

TP-Link TL-WR840N devices allow remote attackers to cause a denial of service (networking outage) via fragmented packets, as demonstrated by an “nmap -f” command.

The post CVE-2018-15840 appeared first on CVE Vulnerability.

CVE-2018-15172

Sun, 26 Feb 2023 06:46:34 +0000

TP-Link WR840N devices have a buffer overflow via a long Authorization HTTP header.

The post CVE-2018-15172 appeared first on CVE Vulnerability.

CVE-2018-13134

Sun, 26 Feb 2023 06:45:54 +0000

TP-Link Archer C1200 1.13 Build 2018/01/24 rel.52299 EU devices have XSS via the PATH_INFO to the /webpages/data URI.

The post CVE-2018-13134 appeared first on CVE Vulnerability.

CVE-2018-12577

Sun, 26 Feb 2023 06:45:42 +0000

The Ping and Traceroute features on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow authenticated blind Command Injection.

The post CVE-2018-12577 appeared first on CVE Vulnerability.

CVE-2018-12576

Sun, 26 Feb 2023 06:45:42 +0000

TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow clickjacking.

The post CVE-2018-12576 appeared first on CVE Vulnerability.

CVE-2018-12575

Sun, 26 Feb 2023 06:45:42 +0000

On TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 171019 Rel.55346n devices, all actions in the web interface are affected by bypass of authentication via an HTTP request.

The post CVE-2018-12575 appeared first on CVE Vulnerability.

CVE-2018-12574

Sun, 26 Feb 2023 06:45:42 +0000

CSRF exists for all actions in the web interface on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices.

The post CVE-2018-12574 appeared first on CVE Vulnerability.

CVE-2018-11714

Sun, 26 Feb 2023 06:45:22 +0000

An issue was discovered on TP-Link TL-WR840N v5 00000005 0.9.1 3.16 v0001.0 Build 170608 Rel.58696n and TL-WR841N v13 00000013 0.9.1 4.16 v0001.0 Build 170622 Rel.64334n devices. This issue is caused by improper session handling on the /cgi/ folder or a /cgi file. If an attacker sends a header of “Referer: http://192.168.0.1/mainFrame.htm” then no authentication is required for any action.

The post CVE-2018-11714 appeared first on CVE Vulnerability.

CVE-2020-9374

Sun, 26 Feb 2023 06:43:43 +0000

On TP-Link TL-WR849N 0.9.1 4.16 devices, a remote command execution vulnerability in the diagnostics area can be exploited when an attacker sends specific shell metacharacters to the panel’s traceroute feature.

The post CVE-2020-9374 appeared first on CVE Vulnerability.