Tp Link Tl Wr841 vulnerabilities
2 vulnerabilities
Known vulnerabilities in Tp Link Tl Wr841, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2022-42433tp-link · tl-wr841_firmware +1 moretp-link tl-wr841_firmwareThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR841N TL-WR841N(US)_V14_220121 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the ated_tp service. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-17356.EPSS0.61%HighCVE-2022-30024tp-link · tl-wr841_firmware +2 moretp-link tl-wr841_firmwareA buffer overflow in the httpd daemon on TP-Link TL-WR841N V12 (firmware version 3.16.9) devices allows an authenticated remote attacker to execute arbitrary code via a GET request to the page for the System Tools of the Wi-Fi network. This affects TL-WR841 V12 TL-WR841N(EU)_V12_160624 and TL-WR841 V11 TL-WR841N(EU)_V11_160325 , TL-WR841N_V11_150616 and TL-WR841 V10 TL-WR841N_V10_150310 are also affected.EPSS2.04%