CveMateVulnerability intelligence

Tp Link Tl Wr840N vulnerabilities

22 vulnerabilities

Known vulnerabilities in Tp Link Tl Wr840N, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2018-11714tp-linktl-wr840n_firmware+18y ago04-06-2018 14:00

An issue was discovered on TP-Link TL-WR840N v5 00000005 0.9.1 3.16 v0001.0 Build 170608 Rel.58696n and TL-WR841N v13 00000013 0.9.1 4.16 v0001.0 Build 170622 Rel.64334n devices. This issue is caused by improper session handling on the /cgi/ folder or a /cgi file. If an attacker sends a header of "Referer: http://192.168.0.1/mainFrame.htm" then no authentication is required for any action.CVE-2018-15840tp-linktl-wr840n_firmware7y ago29-03-2019 17:09

TP-Link TL-WR840N devices allow remote attackers to cause a denial of service (networking outage) via fragmented packets, as demonstrated by an "nmap -f" command.CVE-2018-15172tp-linktl-wr840n_firmware8y ago15-08-2018 17:00

TP-Link WR840N devices have a buffer overflow via a long Authorization HTTP header.CVE-2021-41653tp-linktl-wr840n_firmware4y ago13-11-2021 14:18

The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840N(EU)_V5_171211 is vulnerable to remote code execution via a crafted payload in an IP address input field.CVE-2021-29280tp-linktl-wr840n_firmware5y ago19-08-2021 15:31

In TP-Link Wireless N Router WR840N an ARP poisoning attack can cause buffer overflow CVE-2021-46122tp-linktl-wr840n_firmware4y ago18-04-2022 15:27

Tp-Link TL-WR840N (EU) v6.20 Firmware (0.9.1 4.17 v0001.0 Build 201124 Rel.64328n) is vulnerable to Buffer Overflow via the Password reset feature.CVE-2020-36178tp-linktl-wr840n_firmware5y ago06-01-2021 20:57

oal_ipt_addBridgeIsolationRules on TP-Link TL-WR840N 6_EU_0.9.1_4.16 devices allows OS command injection because a raw string entered from the web interface (an IP address field) is used directly for a call to the system library function (for iptables). NOTE: oal_ipt_addBridgeIsolationRules is not the only function that calls util_execSystem.CVE-2014-9510tp-linktl-wr840n_firmware11y ago09-01-2015 18:00

Cross-site request forgery (CSRF) vulnerability in the administration console in TP-Link TL-WR840N (V1) router with firmware before 3.13.27 build 141120 allows remote attackers to hijack the authentication of administrators for requests that change router settings via a configuration file import.CVE-2022-26640tp-linktl-wr840n_firmware4y ago28-03-2022 22:42

TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the minAddress parameter.CVE-2022-26642tp-linktl-wr840n_firmware4y ago28-03-2022 22:42

TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the X_TP_ClonedMACAddress parameter.CVE-2022-26639tp-linktl-wr840n_firmware4y ago28-03-2022 22:42

TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the DNSServers parameter.CVE-2022-26641tp-linktl-wr840n_firmware4y ago28-03-2022 22:42

TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the httpRemotePort parameter.CVE-2022-25062tp-linktl-wr840n_firmware4y ago25-02-2022 19:38

TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain an integer overflow via the function dm_checkString. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.CVE-2022-25061tp-linktl-wr840n_firmware4y ago25-02-2022 19:39

TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_setIp6DefaultRoute.CVE-2022-25064tp-linktl-wr840n_firmware4y ago25-02-2022 19:38

TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a remote code execution (RCE) vulnerability via the function oal_wan6_setIpAddr.CVE-2022-25060tp-linktl-wr840n_firmware4y ago25-02-2022 19:38

TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_startPing.CVE-2022-29402tp-linktl-wr840n_firmware4y ago25-05-2022 17:24

TP-Link TL-WR840N EU v6.20 was discovered to contain insecure protections for its UART console. This vulnerability allows attackers to connect to the UART port via a serial connection and execute commands as the root user without authentication.CVE-2019-15060tp-linktl-wr840n_firmware7y ago22-08-2019 18:56

The traceroute function on the TP-Link TL-WR840N v4 router with firmware through 0.9.1 3.16 is vulnerable to remote code execution via a crafted payload in an IP address input field.CVE-2019-12195tp-linktl-wr840n_firmware7y ago24-05-2019 15:24

TP-Link TL-WR840N v5 00000005 devices allow XSS via the network name. The attacker must log into the router by breaking the password and going to the admin login page by THC-HYDRA to get the network name. With an XSS payload, the network name changed automatically and the internet connection was disconnected. All the users become disconnected from the internet.CVE-2026-3227tp link systems inc.tl-wr840n v6+57mo ago13-03-2026 21:38

A command injection vulnerability was identified in TP-Link TL-WR802N v4, TL-WR841N v14, and TL-WR840N v6 due to improper neutralization of special elements used in an OS command. In the router configuration import function allows an authenticated attacker to upload a crafted configuration file that results in execution of OS commands with root privileges during port-trigger processing. Successful exploitation allows an authenticated attacker to execute system commands with root privileges, leading to full device compromise.