Vulnerabilities > TP Link

DATE CVE VULNERABILITY TITLE RISK
2024-01-11 CVE-2024-21773 OS Command Injection vulnerability in Tp-Link products
Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product to execute arbitrary OS commands.
low complexity
tp-link CWE-78
8.8
2024-01-11 CVE-2024-21821 OS Command Injection vulnerability in Tp-Link products
Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands.
low complexity
tp-link CWE-78
8.0
2024-01-11 CVE-2024-21833 OS Command Injection vulnerability in Tp-Link products
Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product to execute arbitrary OS commands.
low complexity
tp-link CWE-78
8.8
2024-01-09 CVE-2023-27098 Cleartext Storage of Sensitive Information vulnerability in Tp-Link Tapo
TP-Link Tapo APK up to v2.12.703 uses hardcoded credentials for access to the login panel.
network
low complexity
tp-link CWE-312
7.5
2023-12-28 CVE-2023-34829 Cleartext Transmission of Sensitive Information vulnerability in Tp-Link Tapo 2.11.44/2.8.14
Incorrect access control in TP-Link Tapo before v3.1.315 allows attackers to access user credentials in plaintext.
low complexity
tp-link CWE-319
6.5
2023-10-31 CVE-2023-39610 Resource Exhaustion vulnerability in Tp-Link Tapo C100 Firmware
An issue in TP-Link Tapo C100 v1.1.15 Build 211130 Rel.15378n(4555) and before allows attackers to cause a Denial of Service (DoS) via supplying a crafted web request.
low complexity
tp-link CWE-400
6.5
2023-10-25 CVE-2023-46371 Out-of-bounds Write vulnerability in Tp-Link Tl-Wdr7660 Firmware 2.0.30
TP-Link device TL-WDR7660 2.0.30 has a stack overflow vulnerability via the function upgradeInfoJsonToBin.
network
low complexity
tp-link CWE-787
critical
9.8
2023-10-25 CVE-2023-46373 Out-of-bounds Write vulnerability in Tp-Link Tl-Wdr7660 Firmware 2.0.30
TP-Link TL-WDR7660 2.0.30 has a stack overflow vulnerability via the function deviceInfoJsonToBincauses.
network
low complexity
tp-link CWE-787
critical
9.8
2023-10-25 CVE-2023-46520 Out-of-bounds Write vulnerability in Tp-Link Tl-Wr886N Firmware 3.0.14
TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function uninstallPluginReqHandle.
network
low complexity
tp-link CWE-787
critical
9.8
2023-10-25 CVE-2023-46521 Out-of-bounds Write vulnerability in Tp-Link Tl-Wr886N Firmware 3.0.14
TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function RegisterRegister.
network
low complexity
tp-link CWE-787
critical
9.8