Vulnerabilities > TP Link > High

DATE CVE VULNERABILITY TITLE RISK
2015-04-22 CVE-2015-3035 Path Traversal vulnerability in Tp-Link products
Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316, Archer C9 (1.0), TL-WDR3500 (1.0), TL-WDR3600 (1.0), and TL-WDR4300 (1.0) with firmware before 150302, TL-WR740N (5.0) and TL-WR741ND (5.0) with firmware before 150312, and TL-WR841N (9.0), TL-WR841N (10.0), TL-WR841ND (9.0), and TL-WR841ND (10.0) with firmware before 150310 allows remote attackers to read arbitrary files via a ..
network
low complexity
tp-link CWE-22
7.8
2013-10-11 CVE-2013-2581 Permissions, Privileges, and Access Controls vulnerability in Tp-Link products
cgi-bin/firmwareupgrade in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6 allows remote attackers to modify the firmware revision via a "preset" action.
network
low complexity
tp-link CWE-264
7.8
2013-10-11 CVE-2013-2580 Unspecified vulnerability in Tp-Link products
Unrestricted file upload vulnerability in cgi-bin/uploadfile in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6, allows remote attackers to upload arbitrary files, then accessing it via a direct request to the file in the mnt/mtd directory.
network
tp-link
7.1
2013-10-01 CVE-2013-3688 Permissions, Privileges, and Access Controls vulnerability in Tp-Link products
The TP-Link IP Cameras TL-SC3171, TL-SC3130, TL-SC3130G, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6, does not properly restrict access to certain administrative functions, which allows remote attackers to (1) cause a denial of service (device reboot) via a request to cgi-bin/reboot or (2) cause a denial of service (reboot and reset to factory defaults) via a request to cgi-bin/hardfactorydefault.
network
tp-link CWE-264
7.1
2012-11-01 CVE-2012-5687 Path Traversal vulnerability in Tp-Link Tl-Wr841N and Tl-Wr841N Firmware
Directory traversal vulnerability in the web-based management feature on the TP-LINK TL-WR841N router with firmware 3.13.9 build 120201 Rel.54965n and earlier allows remote attackers to read arbitrary files via a ..
network
low complexity
tp-link CWE-22
7.8
2012-04-28 CVE-2012-2440 Permissions, Privileges, and Access Controls vulnerability in Tp-Link 8840T
The default configuration of the TP-Link 8840T router enables web-based administration on the WAN interface, which allows remote attackers to establish an HTTP connection and possibly have unspecified other impact via unknown vectors.
network
low complexity
tp-link CWE-264
7.5