Vendor
TP-Link
112 known vulnerabilities.
Products
58 results · Clear filters · Feed
-
High 7.0
Information Disclosure Vulnerability in TP-Link Tapo C500 Wi-Fi Camera
This vulnerability exists in Tapo C500 Wi-Fi camera due to hard-coded RSA private key embedded within the device firmware. An attacker with physical access could exploit this vulnerability to obtain cryptographic private keys which can then be used to perform…
-
High 8.5
Insufficient Integrity Verification Vulnerability in TP-Link Archer C50
This vulnerability exists in the TP-Link Archer C50 due to improper signature verification mechanism in the firmware upgrade process at its web interface. An attacker with administrative privileges within the router’s Wi-Fi range could exploit this vulnerabil…
-
High 7.5CVE-2024-11237 Public exploit
TP-Link VN020 F3v(T) DHCP DISCOVER Packet Parser TP-Thumper stack-based overflow
A vulnerability, which was classified as critical, has been found in TP-Link VN020 F3v(T) TT_V6.2.1021. Affected by this issue is some unknown functionality of the component DHCP DISCOVER Packet Parser. The manipulation of the argument hostname leads to stack…
-
High 7.2
A leftover debug code vulnerability exists in the cli_server debug functionality of Tp-Link ER7206 Omada Gigabit VPN Ro…
-
High 8.8
TP-Link Archer C5400X - RFTest Unauthenticated Command Injection
The affected device expose a network service called "rftest" that is vulnerable to unauthenticated command injection on ports TCP/8888, TCP/8889, and TCP/8890. By successfully exploiting this flaw, remote unauthenticated attacker can gain arbitrary command ex…
-
High 7.5CVE-2024-5243 Public exploit
TP-Link Omada ER605 Buffer Overflow Remote Code Execution Vulnerability
TP-Link Omada ER605 Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Omada ER605 routers. Authentication is not required to exploit this vu…
-
High 7.5
TP-Link Omada ER605 Stack-based Buffer Overflow Remote Code Execution Vulnerability
TP-Link Omada ER605 Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Omada ER605 routers. Authentication is not required to exp…
-
High 7.5
TP-Link Omada ER605 Comexe DDNS Response Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability
TP-Link Omada ER605 Comexe DDNS Response Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Omada ER605 routers. Authenti…
-
High 7.5
TP-Link Omada ER605 PPTP VPN username Command Injection Remote Code Execution Vulnerability
TP-Link Omada ER605 PPTP VPN username Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Omada ER605 routers. Authentication is not require…
-
High 7.5
TP-Link TL-WR841N ated_tp Command Injection Remote Code Execution Vulnerability
TP-Link TL-WR841N ated_tp Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit t…
-
High 8.8
TP-Link Tapo C210 Password Recovery Authentication Bypass Vulnerability
TP-Link Tapo C210 Password Recovery Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of TP-Link Tapo C210 IP cameras. Authentication is not required to exploit this vu…
-
High 8.8
TP-Link AX1800 Firmware Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
TP-Link AX1800 Firmware Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AX1800 routers. Authentication is not required…
-
High 8.8
TP-Link Archer AX21 tdpServer Logging Stack-based Buffer Overflow Remote Code Execution Vulnerability
TP-Link Archer AX21 tdpServer Logging Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer AX21 routers. Authentication is n…
-
High 7.4CVE-2023-49074 EPSS 13%
A denial of service vulnerability exists in the TDDP functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Po…
-
High 8.1
A command execution vulnerability exists in the tddpd enable_test_mode functionality of Tp-Link AC1350 Wireless MU-MIMO…
-
High 7.5
A memory corruption vulnerability exists in the web interface functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit …
-
High 8.1
A command execution vulnerability exists in the tddpd enable_test_mode functionality of Tp-Link AC1350 Wireless MU-MIMO…
-
High 7.2
A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC135…
-
High 7.2
A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC135…
-
High 7.2
A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC135…
-
High 7.2
A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC135…
-
High 7.2
A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC135…
-
High 7.2
A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC135…
-
High 7.2
A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC135…
-
High 7.2
A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC135…
-
High 7.5
TP-Link Omada ER605 DHCPv6 Client Options Stack-based Buffer Overflow Remote Code Execution Vulnerability
TP-Link Omada ER605 DHCPv6 Client Options Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Omada ER605 routers. Authentication …
-
High 7.2
A post-authentication command injection vulnerability exists in the PPTP client functionality of Tp-Link ER7206 Omada G…
-
High 7.2CVE-2023-43482 Public exploit
A command execution vulnerability exists in the guest resource functionality of Tp-Link ER7206 Omada Gigabit VPN Router…
-
High 7.2
A post authentication command injection vulnerability exists in the ipsec policy functionality of Tp-Link ER7206 Omada …
-
High 7.2
A post authentication command injection vulnerability exists in the GRE policy functionality of Tp-Link ER7206 Omada Gi…
-
High 7.2
A post authentication command injection vulnerability exists when configuring the wireguard VPN functionality of Tp-Lin…
-
High 7.2
A post authentication command injection vulnerability exists when setting up the PPTP global configuration of Tp-Link E…
-
High 7.2
A post authentication command injection vulnerability exists when configuring the web group member of Tp-Link ER7206 Om…
-
High 7.2
A post authentication command execution vulnerability exists in the web filtering functionality of Tp-Link ER7206 Omada…
-
High 8.8
Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product to execute arbit…
-
High 8.0
Multiple TP-LINK products allow a network-adjacent authenticated attacker with access to the product from the LAN port …
-
High 8.8
Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product from the LAN por…
-
High 8.0
Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected pr…
-
High 8.8
Archer C50 firmware versions prior to 'Archer C50(JP)_V3_230505' and Archer C55 firmware versions prior to 'Archer C55(…
-
High 8.0
Archer C3150 firmware versions prior to 'Archer C3150(JP)_V2_230511' allows a network-adjacent authenticated attacker t…