tp-link Vulnerability Advisory Catalog

Total 520 security vulnerabilities recorded for tp-link software and firmware.

← Back to All Vendors
Component: archer_c20i_firmware

There is remote authenticated OS command injection on TP-Link Archer C20i 0.9.1 3.2 v003a.0 Build 170221 Rel.55462n devices vie the X_TP_ExternalIPv6A...

📅 2022-03-04
CVSS 8.8 Dossier →
CVE-2022-25064 CRITICAL
Component: tl-wr840n_firmware

TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a remote code execution (RCE) vulnerability via the function oal_wan6_setIpAddr....

📅 2022-02-25
CVSS 9.8 Dossier →
Component: tl-wr840n_firmware

TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain an integer overflow via the function dm_checkString. This vulnerability allows attackers ...

📅 2022-02-25
CVSS 7.5 Dossier →
CVE-2022-25061 CRITICAL
Component: tl-wr840n_firmware

TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_setIp6DefaultRoute....

📅 2022-02-25
CVSS 9.8 Dossier →
CVE-2022-25060 CRITICAL
Component: tl-wr840n_firmware

TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_startPing....

📅 2022-02-25
CVSS 9.8 Dossier →
CVE-2022-25074 CRITICAL
Component: tl-wr902ac_firmware

TP-Link TL-WR902AC(US)_V3_191209 routers were discovered to contain a stack overflow in the function DM_ Fillobjbystr(). This vulnerability allows una...

📅 2022-02-24
CVSS 9.8 Dossier →
CVE-2022-25073 CRITICAL
Component: tl-wr841n_firmware

TL-WR841Nv14_US_0.9.1_4.18 routers were discovered to contain a stack overflow in the function dm_fillObjByStr(). This vulnerability allows unauthenti...

📅 2022-02-24
CVSS 9.8 Dossier →
CVE-2022-25072 CRITICAL
Component: archer_a54_firmware

TP-Link Archer A54 Archer A54(US)_V1_210111 routers were discovered to contain a stack overflow in the function DM_ Fillobjbystr(). This vulnerability...

📅 2022-02-24
CVSS 9.8 Dossier →
Component: tl-wr940n_firmware

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel....

📅 2022-02-18
CVSS 8.8 Dossier →
Component: ac1750_firmware

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1750 prior to 1.1.4 Build 202110...

📅 2022-02-18
CVSS 8.8 Dossier →
CVE-2022-22922 CRITICAL
Component: tl-wa850re_firmware

TP-Link TL-WA850RE Wi-Fi Range Extender before v6_200923 was discovered to use highly predictable and easily detectable session keys, allowing attacke...

📅 2022-02-18
CVSS 9.8 Dossier →
Component: tl-wr841n_firmware

The vulnerability exists in TP-Link TL-WR841N V11 3.16.9 Build 160325 Rel.62500n wireless router due to transmission of authentication information in ...

📅 2022-02-09
CVSS 8.4 Dossier →
Component: wn886n_firmware

TP-Link WR886N 3.0 1.0.1 Build 150127 Rel.34123n is vulnerable to Buffer Overflow. Authenticated attackers can crash router httpd services via /userRp...

📅 2022-02-08
CVSS 6.5 Dossier →
CVE-2021-35004 CRITICAL
Component: tl-wa1201_firmware

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link TL-WA1201 1.0.1 Build 20200709 rel.66244(555...

📅 2022-01-21
CVSS 9.8 Dossier →
CVE-2021-35003 CRITICAL
Component: archer_c90_firmware

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer C90 1.0.6 Build 20200114 rel.73164(55...

📅 2022-01-21
CVSS 9.8 Dossier →
Component: tl-wr802n_firmware

TP-Link wifi router TL-WR802N V4(JP), with firmware version prior to 211202, is vulnerable to OS command injection....

📅 2021-12-23
CVSS 8.8 Dossier →
Component: archer_ax10_firmware

A misconfiguration in HTTP/1.0 and HTTP/1.1 of the web interface in TP-Link AX10v1 before V1_211117 allows a remote unauthenticated attacker to send a...

📅 2021-12-17
CVSS 7.5 Dossier →
Component: archer_ax10_v1_firmware

An HTTP request smuggling attack in TP-Link AX10v1 before v1_211117 allows a remote unauthenticated attacker to DoS the web application via sending a ...

📅 2021-12-08
CVSS 7.5 Dossier →
Component: archer_ax10_firmware

A denial-of-service attack in WPA2, and WPA3-SAE authentication methods in TP-Link AX10v1 before V1_211014, allows a remote unauthenticated attacker t...

📅 2021-12-07
CVSS 7.5 Dossier →
CVE-2021-41653 CRITICAL
Component: tl-wr840n_firmware

The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840N(EU)_V5_171211 is vulnerable to remote code execution via a cra...

📅 2021-11-13
CVSS 9.8 Dossier →
Component: tl-wr840n_firmware

In TP-Link Wireless N Router WR840N an ARP poisoning attack can cause buffer overflow...

📅 2021-08-19
CVSS 6.4 Dossier →
Component: ue330_firmware

TP-Link UE330 USB splitter devices through 2021-08-09, in certain specific use cases in which the device supplies power to audio-output equipment, all...

📅 2021-08-11
CVSS 5.9 Dossier →
Component: tl-wpa4220_firmware

TP-Link's TL-WPA4220 4.0.2 Build 20180308 Rel.37064 does not use SSL by default. Attacker on the local network can monitor traffic and capture the coo...

📅 2021-06-15
CVSS 5.5 Dossier →
Component: tl-wpa4220_firmware

TP-Link's TL-WPA4220 4.0.2 Build 20180308 Rel.37064 username and password are sent via the cookie....

📅 2021-06-15
CVSS 7.5 Dossier →
Page 14 of 22 (520 Total Records)