tp-link Vulnerability Advisory Catalog

Total 520 security vulnerabilities recorded for tp-link software and firmware.

← Back to All Vendors
Component: tl-sg108e_firmware

A vulnerability classified as problematic has been found in TP-Link TL-SG108E 1.0.0 Build 20201208 Rel. 40304. Affected is an unknown function of the ...

📅 2025-01-27
CVSS 3.7 Dossier →
Component: tl-wr940n_firmware

TP-Link TL-WR940N V3 and V4 with firmware 3.16.9 and earlier contain a buffer overflow via the dnsserver1 and dnsserver2 parameters at /userRpm/Wan6to...

📅 2025-01-09
CVSS 8.0 Dossier →
Component: tl-wr845n_firmware

TP-Link TL-WR845N(UN)_V4_190219 was discovered to transmit credentials in base64 encoded form, which can be easily decoded by an attacker executing a ...

📅 2024-12-10
CVSS 8.0 Dossier →
CVE-2024-46340 CRITICAL
Component: tl-wr845n_firmware

TL-WR845N(UN)_V4_201214, TP-Link TL-WR845N(UN)_V4_200909, and TL-WR845N(UN)_V4_190219 was discovered to transmit user credentials in plaintext after e...

📅 2024-12-10
CVSS 9.8 Dossier →
Component: tl-wr845n_firmware

TP-Link TL-WR845N(UN)_V4_201214, TL-WR845N(UN)_V4_200909 and TL-WR845N(UN)_V4_190219 were discovered to contain weak default credentials for the Admin...

📅 2024-12-10
CVSS 8.0 Dossier →
Component: vn020_f3v_firmware

A vulnerability, which was classified as critical, was found in TP-Link VN020 F3v(T) TT_V6.2.1021. This affects an unknown part of the component FTP U...

📅 2024-12-08
CVSS 6.3 Dossier →
Component: vn020_f3v_firmware

A vulnerability classified as critical has been found in TP-Link VN020 F3v(T) TT_V6.2.1021. Affected is an unknown function of the file /control/WANIP...

📅 2024-12-08
CVSS 6.5 Dossier →
Component: tl-ipc42c_firmware

TP-Link TL-IPC42C V4.0_20211227_1.0.16 is vulnerable to command injection due to the lack of malicious code verification on both the frontend and back...

📅 2024-11-21
CVSS 8.0 Dossier →
Component: vn020-f3v\(t\)_firmware

A vulnerability, which was classified as critical, has been found in TP-Link VN020 F3v(T) TT_V6.2.1021. Affected by this issue is some unknown functio...

📅 2024-11-15
CVSS 7.5 Dossier →
Component: tapo_h100_firmware

This vulnerability exists in TP-Link IoT Smart Hub due to storage of Wi-Fi credentials in plain text within the device firmware. An attacker with phys...

📅 2024-11-04
CVSS 4.6 Dossier →
Component: mr200_firmware

TP Link MR200 V4 Firmware version 210201 was discovered to contain a null-pointer-dereference in the web administration panel on /cgi/login via the si...

📅 2024-11-01
CVSS 7.5 Dossier →
Component: tl-wdr7660_firmware

In TP-Link TL-WDR7660 v1.0, the guestRuleJsonToBin function handles the parameter string name without checking it, which can lead to stack overflow vu...

📅 2024-10-15
CVSS 6.5 Dossier →
Component: tl-wdr7660_firmware

In TP-Link TL-WDR7660 1.0, the wacWhitelistJsonToBin function handles the parameter string name without checking it, which can lead to stack overflow ...

📅 2024-10-15
CVSS 6.5 Dossier →
Component: tl-wdr7660_firmware

In TP-Link TL-WDR7660 1.0, the rtRuleJsonToBin function handles the parameter string name without checking it, which can lead to stack overflow vulner...

📅 2024-10-15
CVSS 6.5 Dossier →
Component: tl-wdr7660_firmware

In TP-Link TL-WDR7660 1.0, the wlanTimerRuleJsonToBin function handles the parameter string name without checking it, which can lead to stack overflow...

📅 2024-10-15
CVSS 6.5 Dossier →
Component: wr740n_firmware

TP-Link WR740N V6 has a stack overflow vulnerability via the ssid parameter in /userRpm/popupSiteSurveyRpm.htm url....

📅 2024-10-07
CVSS 5.5 Dossier →
Component: tl-wdr5620_firmware

TP-LINK TL-WDR5620 v2.3 was discovered to contain a remote code execution (RCE) vulnerability via the httpProcDataSrv function....

📅 2024-10-04
CVSS 8.0 Dossier →
Component: wr941nd_firmware

TP-Link WR941ND V6 has a stack overflow vulnerability in the ssid parameter in /userRpm/popupSiteSurveyRpm.htm....

📅 2024-09-30
CVSS 8.0 Dossier →
CVE-2024-9284 MEDIUM
Component: tl-wr841nd_firmware

A vulnerability was found in TP-LINK TL-WR841ND up to 20240920. It has been rated as critical. Affected by this issue is some unknown functionality of...

📅 2024-09-27
CVSS 6.5 Dossier →
CVE-2024-42815 CRITICAL
Component: re365_firmware

In the TP-Link RE365 V1_180213, there is a buffer overflow vulnerability due to the lack of length verification for the USER_AGENT field in /usr/bin/h...

📅 2024-08-19
CVSS 9.8 Dossier →
Component: er7206_firmware

A leftover debug code vulnerability exists in the cli_server debug functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.4.1 Build 20240117 Rel.5...

📅 2024-06-25
CVSS 7.2 Dossier →
Component: tl-7dr5130_firmware

TP-LINK TL-7DR5130 v1.0.23 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same WLAN as the victim can disconnect or hijack the traf...

📅 2024-06-17
CVSS 6.3 Dossier →
Component: tl-7dr5130_firmware

TP-LINK TL-7DR5130 v1.0.23 is vulnerable to forged ICMP redirect message attacks. An attacker in the same WLAN as the victim can hijack the traffic be...

📅 2024-06-17
CVSS 6.3 Dossier →
CVE-2024-5244 MEDIUM
Component: omada_er605_firmware

TP-Link Omada ER605 Reliance on Security Through Obscurity Vulnerability. This vulnerability allows network-adjacent attackers to access or spoof DDNS...

📅 2024-05-23
CVSS 4.2 Dossier →
Page 6 of 22 (520 Total Records)