tp-link Vulnerability Advisory Catalog

Total 520 security vulnerabilities recorded for tp-link software and firmware.

← Back to All Vendors
Component: eap225_firmware

A command execution vulnerability exists in the tddpd enable_test_mode functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V...

📅 2024-04-09
CVSS 8.1 Dossier →
Component: eap225_firmware

A denial of service vulnerability exists in the TDDP functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20...

📅 2024-04-09
CVSS 7.4 Dossier →
Component: eap225_firmware

A memory corruption vulnerability exists in the web interface functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0...

📅 2024-04-09
CVSS 7.5 Dossier →
Component: omada_er605_firmware

TP-Link Omada ER605 Access Control Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to exec...

📅 2024-04-03
CVSS 8.0 Dossier →
Component: omada_er605_firmware

TP-Link Omada ER605 DHCPv6 Client Options Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent ...

📅 2024-04-01
CVSS 8.8 Dossier →
CVE-2024-25139 CRITICAL
Component: omada_er605_firmware

In TP-Link Omada er605 1.0.1 through (v2.6) 2.2.3, a cloud-brd binary is susceptible to an integer overflow that leads to a heap-based buffer overflow...

📅 2024-03-14
CVSS 10.0 Dossier →
Component: tl-sg2210p_firmware

TP-Link JetStream Smart Switch TL-SG2210P 5.0 Build 20211201 allows attackers to escalate privileges via modification of the 'tid' and 'usrlvl' values...

📅 2024-03-06
CVSS 8.8 Dossier →
CVE-2024-2188 MEDIUM
Component: archer_ax50_firmware

Cross-Site Scripting (XSS) vulnerability stored in TP-Link Archer AX50 affecting firmware version 1.0.11 build 2022052. This vulnerability could allow...

📅 2024-03-05
CVSS 6.1 Dossier →
Component: er7206_firmware

A post authentication command execution vulnerability exists in the web filtering functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build...

📅 2024-02-06
CVSS 7.2 Dossier →
Component: er7206_firmware

A post authentication command injection vulnerability exists when configuring the web group member of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 bu...

📅 2024-02-06
CVSS 7.2 Dossier →
Component: er7206_firmware

A post authentication command injection vulnerability exists in the ipsec policy functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build ...

📅 2024-02-06
CVSS 7.2 Dossier →
Component: er7206_firmware

A post authentication command injection vulnerability exists in the GRE policy functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20...

📅 2024-02-06
CVSS 7.2 Dossier →
Component: er7206_firmware

A post authentication command injection vulnerability exists when configuring the wireguard VPN functionality of Tp-Link ER7206 Omada Gigabit VPN Rou...

📅 2024-02-06
CVSS 7.2 Dossier →
Component: er7206_firmware

A command execution vulnerability exists in the guest resource functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591...

📅 2024-02-06
CVSS 7.2 Dossier →
Component: er7206_firmware

A post authentication command injection vulnerability exists when setting up the PPTP global configuration of Tp-Link ER7206 Omada Gigabit VPN Router ...

📅 2024-02-06
CVSS 7.2 Dossier →
Component: er7206_firmware

A post-authentication command injection vulnerability exists in the PPTP client functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 2...

📅 2024-02-06
CVSS 7.2 Dossier →
Component: tapo_c200_firmware

Insecure Permissiosn vulnerability in TP Link TC70 and C200 WIFI Camera v.3 firmware v.1.3.4 and fixed in v.1.3.11 allows a physically proximate attac...

📅 2024-01-17
CVSS 4.6 Dossier →
Component: archer_ax3000_firmware

Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product to execute arbitrary OS commands. The affected ...

📅 2024-01-11
CVSS 8.8 Dossier →
Component: archer_ax3000_firmware

Multiple TP-LINK products allow a network-adjacent authenticated attacker with access to the product from the LAN port or Wi-Fi to execute arbitrary O...

📅 2024-01-11
CVSS 8.0 Dossier →
Component: archer_ax3000_firmware

Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product from the LAN port or Wi-Fi to execute arbitrary...

📅 2024-01-11
CVSS 8.8 Dossier →
Component: tapo

TP-Link Tapo APK up to v2.12.703 uses hardcoded credentials for access to the login panel....

📅 2024-01-09
CVSS 7.5 Dossier →
Component: tapo

Incorrect access control in TP-Link Tapo before v3.1.315 allows attackers to access user credentials in plaintext....

📅 2023-12-28
CVSS 6.5 Dossier →
Component: tapo_c100_firmware

An issue in TP-Link Tapo C100 v1.1.15 Build 211130 Rel.15378n(4555) and before allows attackers to cause a Denial of Service (DoS) via supplying a cra...

📅 2023-10-31
CVSS 6.5 Dossier →
CVE-2023-46539 CRITICAL
Component: tl-wr886n_firmware

TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function registerRequestHandle....

📅 2023-10-25
CVSS 9.8 Dossier →
Page 8 of 22 (520 Total Records)