Tp Link vulnerabilities
559 vulnerabilities
Known vulnerabilities in Tp Link products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 587 products.
Products
50 of 587- Tl Wr841N40 vulnerabilities
- Tl Wr886N39 vulnerabilities
- Er5110G25 vulnerabilities
- Er5120G25 vulnerabilities
- Er5510G25 vulnerabilities
- Er5520G25 vulnerabilities
- R4149G25 vulnerabilities
- R4239G25 vulnerabilities
- R4299G25 vulnerabilities
- R47325 vulnerabilities
- R473G25 vulnerabilities
- R473Gp Ac25 vulnerabilities
- R473P Ac25 vulnerabilities
- R47825 vulnerabilities
- R478G\+25 vulnerabilities
- R48325 vulnerabilities
- R483G25 vulnerabilities
- R48825 vulnerabilities
- War1300L25 vulnerabilities
- War1750L25 vulnerabilities
- War2600L25 vulnerabilities
- War30225 vulnerabilities
- War45025 vulnerabilities
- War450L25 vulnerabilities
- War45825 vulnerabilities
- War458L25 vulnerabilities
- War900L25 vulnerabilities
- Wvr1300G25 vulnerabilities
- Wvr1300L25 vulnerabilities
- Wvr1750L25 vulnerabilities
- Wvr2600L25 vulnerabilities
- Wvr30025 vulnerabilities
- Wvr30225 vulnerabilities
- Wvr4300L25 vulnerabilities
- Wvr45025 vulnerabilities
- Wvr450L25 vulnerabilities
- Wvr458L25 vulnerabilities
- Wvr900G25 vulnerabilities
- Wvr900L25 vulnerabilities
- Tl Wr840N22 vulnerabilities
- Tl Wr940N22 vulnerabilities
- Archer Ax5318 vulnerabilities
- Er720617 vulnerabilities
- Omada Er60515 vulnerabilities
- Ac175013 vulnerabilities
- Ac1350 Wireless MU MIMO Gigabit Access Point (Eap225 V3)12 vulnerabilities
- Archer Be23012 vulnerabilities
- Eap22512 vulnerabilities
- Archer A711 vulnerabilities
- Tapo C20011 vulnerabilities
CVE-2018-16119tp-linktl-wr1043nd_firmware
EPSS score33.60%
Stack-based buffer overflow in the httpd server of TP-Link WR1043nd (Firmware Version 3) allows remote attackers to execute arbitrary code via a malicious MediaServer request to /userRpm/MediaServerFoldersCfgRpm.htm.CVE-2018-13134tp-linkarcher_c1200_firmwareEPSS score2.33%
TP-Link Archer C1200 1.13 Build 2018/01/24 rel.52299 EU devices have XSS via the PATH_INFO to the /webpages/data URI.CVE-2018-19537tp-linkarcher_c5_firmwareEPSS score5.98%
TP-Link Archer C5 devices through V2_160201_US allow remote command execution via shell metacharacters on the wan_dyn_hostname line of a configuration file that is encrypted with the 478DA50BF9E3D2CF key and uploaded through the web GUI by using the web admin account. The default password of admin may be used in some cases.CVE-2018-19528tp-linktl-wr886n_firmwareEPSS score2.68%
TP-Link TL-WR886N 7.0 1.1.0 devices allow remote attackers to cause a denial of service (Tlb Load Exception) via crafted DNS packets to port 53/udp.CVE-2018-11482tp-linkipc_tl-ipc223\(p\)-6_firmware+3EPSS score1.22%
/usr/lib/lua/luci/websys.lua on TP-LINK IPC TL-IPC223(P)-6, TL-IPC323K-D, TL-IPC325(KP)-*, and TL-IPC40A-4 devices has a hardcoded zMiVw8Kw0oxKXL0 password.CVE-2018-11714tp-linktl-wr840n_firmware+1EPSS score67.06%
An issue was discovered on TP-Link TL-WR840N v5 00000005 0.9.1 3.16 v0001.0 Build 170608 Rel.58696n and TL-WR841N v13 00000013 0.9.1 4.16 v0001.0 Build 170622 Rel.64334n devices. This issue is caused by improper session handling on the /cgi/ folder or a /cgi file. If an attacker sends a header of "Referer: http://192.168.0.1/mainFrame.htm" then no authentication is required for any action.CVE-2018-11481tp-linkipc_tl-ipc223\(p\)-6_firmware+3EPSS score1.76%
TP-LINK IPC TL-IPC223(P)-6, TL-IPC323K-D, TL-IPC325(KP)-*, and TL-IPC40A-4 devices allow authenticated remote code execution via crafted JSON data because /usr/lib/lua/luci/torchlight/validator.lua does not block various punctuation characters.CVE-2018-20372tp-linktd-w8961nd_firmwareEPSS score0.59%
TP-Link TD-W8961ND devices allow XSS via the hostname of a DHCP client.CVE-2018-14336tp-linkwr840n_firmwareEPSS score8.19%
TP-Link WR840N devices allow remote attackers to cause a denial of service (connectivity loss) via a series of packets with random MAC addresses.CVE-2018-17016tp-linktl-wr886n_firmwareEPSS score1.04%
An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for reboot_timer name.CVE-2018-17013tp-linktl-wr886n_firmwareEPSS score1.04%
An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for protocol wan wan_rate.CVE-2018-17017tp-linktl-wr886n_firmwareEPSS score1.04%
An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for dhcpd udhcpd enable.CVE-2018-17011tp-linktl-wr886n_firmwareEPSS score1.04%
An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for hosts_info para sun.CVE-2018-17014tp-linktl-wr886n_firmwareEPSS score1.04%
An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for ip_mac_bind name.CVE-2018-17006tp-linktl-wr886n_firmwareEPSS score1.04%
An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for firewall lan_manage mac2.CVE-2018-17005tp-linktl-wr886n_firmwareEPSS score1.04%
An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for firewall dmz enable.CVE-2018-17007tp-linktl-wr886n_firmwareEPSS score1.04%
An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for wireless wlan_wds_2g ssid.CVE-2018-17009tp-linktl-wr886n_firmwareEPSS score1.04%
An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for wireless wlan_host_2g isolate.CVE-2018-17004tp-linktl-wr886n_firmwareEPSS score1.04%
An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for wlan_access name.CVE-2018-17012tp-linktl-wr886n_firmwareEPSS score1.04%
An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for hosts_info set_block_flag up_limit.