Vulnerabilities > TP Link > Archer C3150 Firmware

DATE CVE VULNERABILITY TITLE RISK
2023-09-06 CVE-2023-38588 OS Command Injection vulnerability in Tp-Link Archer C3150 Firmware
Archer C3150 firmware versions prior to 'Archer C3150(JP)_V2_230511' allows a network-adjacent authenticated attacker to execute arbitrary OS commands.
low complexity
tp-link CWE-78
8.0
2021-03-26 CVE-2021-3275 Cross-site Scripting vulnerability in Tp-Link products
Unauthenticated stored cross-site scripting (XSS) exists in multiple TP-Link products including WIFI Routers (Wireless AC routers), Access Points, ADSL + DSL Gateways and Routers, which affects TD-W9977v1, TL-WA801NDv5, TL-WA801Nv6, TL-WA802Nv5, and Archer C3150v2 devices through the improper validation of the hostname.
network
low complexity
tp-link CWE-79
6.1