tp-link Vulnerability Advisory Catalog

Total 520 security vulnerabilities recorded for tp-link software and firmware.

← Back to All Vendors
CVE-2023-27837 CRITICAL
Component: tl-wpa8630p_firmware

TP-Link TL-WPA8630P (US)_ V2_ Version 171011 was discovered to contain a command injection vulnerability via the key parameter in the function sub_ 40...

📅 2023-06-13
CVSS 9.8 Dossier →
Component: ec70_firmware

TP-Link EC-70 devices through 2.3.4 Build 20220902 rel.69498 have a Buffer Overflow....

📅 2023-06-12
CVSS 8.8 Dossier →
Component: tl-wr940n_firmware

TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerability via the component /userRpm/...

📅 2023-06-07
CVSS 8.8 Dossier →
Component: tl-wr940n_firmware

TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a buffer overflow via the component /userRpm/FixMapCfgRpm....

📅 2023-06-07
CVSS 8.1 Dossier →
Component: tl-wr940n_firmware

TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a buffer overflow via the component /userRpm/WlanMacFilterRpm...

📅 2023-06-07
CVSS 8.1 Dossier →
Component: tapo_c200_firmware

The AES Key-IV pair used by the TP-Link TAPO C200 camera V3 (EU) on firmware version 1.1.22 Build 220725 is reused across all cameras. An attacker wit...

📅 2023-06-06
CVSS 4.6 Dossier →
Component: archer_vr1600v_firmware

A command injection vulnerability exists in the administrative web portal in TP-Link Archer VR1600V devices running firmware Versions <= 0.1.0. 0.9.1 ...

📅 2023-05-19
CVSS 6.7 Dossier →
Component: tl-wpa4530_kit_firmware

TP-Link TL-WPA4530 KIT V2 (EU)_170406 and V2 (EU)_161115 is vulnerable to Command Injection via _httpRpmPlcDeviceRemove....

📅 2023-05-17
CVSS 8.8 Dossier →
Component: tl-wpa4530_kit_firmware

TP-Link TL-WPA4530 KIT V2 (EU)_170406 and V2 (EU)_161115 is vulnerable to Command Injection via _httpRpmPlcDeviceAdd....

📅 2023-05-17
CVSS 8.8 Dossier →
CVE-2023-2646 MEDIUM
Component: archer_c7_firmware

A vulnerability has been found in TP-Link Archer C7v2 v2_en_us_180114 and classified as problematic. Affected by this vulnerability is an unknown func...

📅 2023-05-11
CVSS 4.5 Dossier →
Component: tapo_c310_firmware

TP-Link Tapo C310 1.3.0 devices allow access to the RTSP video feed via credentials of User --- and Password TPL075526460603....

📅 2023-04-16
CVSS 7.5 Dossier →
Component: t2600g-28sq_firmware

TP-Link L2 switch T2600G-28SQ firmware versions prior to 'T2600G-28SQ(UN)_V1_1.0.6 Build 20230227' uses vulnerable SSH host keys. A fake device may be...

📅 2023-04-11
CVSS 5.7 Dossier →
Component: tl-wr940n_firmware

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of TP-Link TL-WR940N 6_211111 3.20.1(US) route...

📅 2023-03-29
CVSS 8.8 Dossier →
Component: tl-wr940n_firmware

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR940N 6_211111 3.20.1(...

📅 2023-03-29
CVSS 6.5 Dossier →
Component: tl-wr841_firmware

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR841N TL-WR841N(US)_V14_220121...

📅 2023-03-29
CVSS 8.0 Dossier →
Component: tl-wr940n_firmware

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel....

📅 2023-03-28
CVSS 8.0 Dossier →
Component: tl-wr940n_firmware

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR940N 3.20.1 Build 200...

📅 2023-03-28
CVSS 6.5 Dossier →
Component: ac1750_firmware

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1750 1.1.4 Build 20211022 rel.59...

📅 2023-03-28
CVSS 8.8 Dossier →
Component: ac1750_firmware

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1750 prior to 211210 routers. Au...

📅 2023-03-28
CVSS 8.8 Dossier →
Component: tl-wr940n_firmware

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel....

📅 2023-03-28
CVSS 8.0 Dossier →
CVE-2023-27078 CRITICAL
Component: tl-mr3020_firmware

A command injection issue was found in TP-Link MR3020 v.1_150921 that allows a remote attacker to execute arbitrary commands via a crafted request to ...

📅 2023-03-23
CVSS 9.8 Dossier →
Component: archer_ax21_firmware

TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability in the country form of the /cgi...

📅 2023-03-15
CVSS 8.8 Dossier →
Component: tl-wr940n_firmware

TP-Link router TL-WR940N V6 3.19.1 Build 180119 uses a deprecated MD5 algorithm to hash the admin password used for basic authentication....

📅 2023-02-22
CVSS 7.5 Dossier →
CVE-2023-0936 MEDIUM
Component: archer_c50

A vulnerability was found in TP-Link Archer C50 V2_160801. It has been rated as problematic. Affected by this issue is some unknown functionality of t...

📅 2023-02-21
CVSS 6.5 Dossier →
Page 11 of 22 (520 Total Records)