tp-link Vulnerability Advisory Catalog

Total 520 security vulnerabilities recorded for tp-link software and firmware.

← Back to All Vendors
Component: tapo_c200_v1_firmware

An access control issue on TP-LInk Tapo C200 V1 devices allows physically proximate attackers to obtain root access by connecting to the UART pins, in...

📅 2023-01-23
CVSS 6.4 Dossier →
Component: tl-wdr7660_firmware

An issue was discovered in function httpProcDataSrv in TL-WDR7660 2.0.30 that allows attackers to execute arbitrary code....

📅 2023-01-19
CVSS 8.0 Dossier →
CVE-2023-22303 CRITICAL
Component: tl-sg105pe_firmware

TP-Link SG105PE firmware prior to 'TL-SG105PE(UN) 1.0_1.0.0 Build 20221208' contains an authentication bypass vulnerability. Under the certain conditi...

📅 2023-01-17
CVSS 9.8 Dossier →
CVE-2022-4498 CRITICAL
Component: archer_c5_firmware

In TP-Link routers, Archer C5 and WR710N-V1, running the latest available code, when receiving HTTP Basic Authentication the httpd service can be sent...

📅 2023-01-11
CVSS 9.8 Dossier →
Component: archer_c5_firmware

TP-Link routers, Archer C5 and WR710N-V1, using the latest software, the strcmp function used for checking credentials in httpd, is susceptible to a s...

📅 2023-01-11
CVSS 7.5 Dossier →
Component: tl-wr902ac_firmware

TP-Link TL-WR902AC devices through V3 0.9.1 allow remote authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS) by uploa...

📅 2022-12-30
CVSS 8.8 Dossier →
Component: tl-wa801n_firmware

An issue in the firmware update process of TP-LINK TL-WA801N / TL-WA801ND V1 v3.12.16 and earlier allows attackers to execute arbitrary code or cause ...

📅 2022-12-20
CVSS 8.8 Dossier →
Component: tl-wr841n_firmware

An issue in the firmware update process of TP-Link TL-WR841N / TL-WA841ND V7 3.13.9 and earlier allows attackers to execute arbitrary code or cause a ...

📅 2022-12-20
CVSS 8.8 Dossier →
Component: tl-wa901n_firmware

An issue in the firmware update process of TP-Link TL-WA901ND V1 up to v3.11.2 and TL-WA901N V2 up to v3.12.16 allows attackers to execute arbitrary c...

📅 2022-12-20
CVSS 8.8 Dossier →
Component: tl-wr941nd_v2_firmware

An issue in the firmware update process of TP-Link TL-WR941ND V2/V3 up to 3.13.9 and TL-WR941ND V4 up to 3.12.8 allows attackers to execute arbitrary ...

📅 2022-12-20
CVSS 8.8 Dossier →
Component: tl-wa7510n_v1_firmware

An issue in the firmware update process of TP-Link TL-WA7510N v1 v3.12.6 and earlier allows attackers to execute arbitrary code or cause a Denial of S...

📅 2022-12-20
CVSS 7.5 Dossier →
Component: tl-wr743nd_v1_firmware

An exploitable firmware modification vulnerability was discovered on TP-Link TL-WR743ND V1. An attacker can conduct a MITM (Man-in-the-Middle) attack ...

📅 2022-12-20
CVSS 7.5 Dossier →
Component: tl-wr740n_v1_firmware

TP-Link TL-WR740N V1 and V2 v3.12.4 and earlier allows authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS) via upload...

📅 2022-12-20
CVSS 4.8 Dossier →
Component: tl-wr1043nd_v1_firmware

TP-Link TL-WR1043ND V1 3.13.15 and earlier allows authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a...

📅 2022-12-20
CVSS 4.8 Dossier →
Component: tl-wr940n_v4_firmware

TP-Link TL-WR940N V4 3.16.9 and earlier allows authenticated attackers to cause a Denial of Service (DoS) via uploading a crafted firmware image durin...

📅 2022-12-20
CVSS 6.5 Dossier →
Component: re3000_firmware

tdpServer of TP-Link RE300 V1 improperly processes its input, which may allow an attacker to cause a denial-of-service (DoS) condition of the product'...

📅 2022-12-07
CVSS 5.5 Dossier →
CVE-2022-4296 MEDIUM
Component: tl-wr740n_firmware

A vulnerability classified as problematic has been found in TP-Link TL-WR740N. Affected is an unknown function of the component ARP Handler. The manip...

📅 2022-12-06
CVSS 6.5 Dossier →
Component: ax10_firmware

TP-Link AX10v1 V1_211117 allows attackers to execute a replay attack by using a previously transmitted encrypted authentication message and valid auth...

📅 2022-10-18
CVSS 8.1 Dossier →
Component: ax10_firmware

The web app client of TP-Link AX10v1 V1_211117 uses hard-coded cryptographic keys when communicating with the router. Attackers who are able to interc...

📅 2022-10-18
CVSS 5.9 Dossier →
Component: tl-wr841n_firmware

TP-Link TL-WR841N 8.0 4.17.16 Build 120201 Rel.54750n is vulnerable to Cross Site Scripting (XSS)....

📅 2022-10-18
CVSS 6.1 Dossier →
Component: archer_ax10_v1_firmware

TP Link Archer AX10 V1 Firmware Version 1.3.1 Build 20220401 Rel. 57450(5553) was discovered to allow authenticated attackers to execute arbitrary cod...

📅 2022-09-28
CVSS 8.8 Dossier →
CVE-2022-37860 CRITICAL
Component: m7350_firmware

The web configuration interface of the TP-Link M7350 V3 with firmware version 190531 is affected by a pre-authentication command injection vulnerabili...

📅 2022-09-12
CVSS 9.8 Dossier →
CVE-2021-42232 CRITICAL
Component: archer_a7_firmware

TP-Link Archer A7 Archer A7(US)_V5_210519 is affected by a command injection vulnerability in /usr/bin/tddp. The vulnerability is caused by the progra...

📅 2022-08-23
CVSS 9.8 Dossier →
CVE-2022-34555 CRITICAL
Component: tl-r473g_firmware

TP-LINK TL-R473G 2.0.1 Build 220529 Rel.65574n was discovered to contain a remote code execution vulnerability which is exploited via a crafted packet...

📅 2022-07-28
CVSS 9.8 Dossier →
Page 12 of 22 (520 Total Records)