CVE-2014-4728: tp-link tl-wdr4300_firmware Resource Management Errors

EPSS trend

Probability

1.79%

Chance of exploitation in the next 30 days

Percentile

78%

Versus all other CVEs

30-day change

0.00 pp

From 1.79% on 21-09-2026

21-09-202621-10-2026

EPSS score

1.79%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (seclists.org)
Maturity: unknown
referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown

References

6 links

exchange.xforce.ibmcloud.com/vulnerabilities/96140VDB EntryX Refsource XF
www.securityfocus.com/archive/1/533501/100/0/threadedMailing ListX Refsource BUGTRAQ
seclists.org/fulldisclosure/2014/Sep/80Mailing ListX Refsource FULLDISCExploit
www.securityfocus.com/bid/70037VDB EntryX Refsource BIDExploit
www.securityfocus.com/archive/1/533499/100/0/threadedMailing ListX Refsource BUGTRAQ
packetstormsecurity.com/files/128343/TP-LINK-WDR4300-XSS-Denial-Of-Service.htmlX Refsource MISC

Related vulnerabilities

CVE-2013-4848tp-linktl-wdr4300_firmware1.15%6y ago25-10-2019 16:03TP-Link TL-WDR4300 version 3.13.31 has multiple CSRF vulnerabilities.CVE-2013-4654tp-linktl-1043nd_firmware+12.70%6y ago13-11-2019 15:56Symlink Traversal vulnerability in TP-LINK TL-WDR4300 and TL-1043ND..CVE-2015-3035tp-linkarcher_c5_firmware+10KEV83.95%11y ago17-04-2015 18:00Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316, Archer C9 (1.0), TL-WDR3500 (1.0), TL-WDR3600 (1.0), and TL-WDR4300 (1.0) with firmware before 150302, TL-WR740N (5.0) and TL-WR741ND (5.0) with firmware before 150312, and TL-WR841N (9.0), TL-WR841N (10.0), TL-WR841ND (9.0), and TL-WR841ND (10.0) with firmware before 150310 allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/.CVE-2014-4727tp-linktl-wdr4300_firmware2.02%12y ago30-09-2014 16:00Cross-site scripting (XSS) vulnerability in the DHCP clients page in the TP-LINK N750 Wireless Dual Band Gigabit Router (TL-WDR4300) with firmware before 140916 allows remote attackers to inject arbitrary web script or HTML via the hostname in a DHCP request.CVE-2019-6487tp-linktl-wdr3500_firmware+48.52%7y ago18-01-2019 10:00TP-Link WDR Series devices through firmware v3 (such as TL-WDR5620 V3.0) are affected by command injection (after login) leading to remote code execution, because shell metacharacters can be included in the weather get_weather_observe citycode field.CVE-2023-50224tp-linkarcher_c1900_firmware+47KEV20.02%2y ago03-05-2024 02:14TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.

All vulnerabilities intl-wdr4300_firmware

CVE-2014-4728: tp-link tl-wdr4300_firmware Resource Management Errors

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References