Vulnerabilities > TP Link > High

DATE CVE VULNERABILITY TITLE RISK
2018-11-30 CVE-2018-3948 Improper Input Validation vulnerability in Tp-Link Tl-R600Vpn Firmware 1.2.3/1.3.0
An exploitable denial-of-service vulnerability exists in the URI-parsing functionality of the TP-Link TL-R600VPN HTTP server.
network
low complexity
tp-link CWE-20
7.5
2018-11-26 CVE-2018-19537 Unrestricted Upload of File with Dangerous Type vulnerability in Tp-Link Archer C5 Firmware 2160201Us
TP-Link Archer C5 devices through V2_160201_US allow remote command execution via shell metacharacters on the wan_dyn_hostname line of a configuration file that is encrypted with the 478DA50BF9E3D2CF key and uploaded through the web GUI by using the web admin account.
network
low complexity
tp-link CWE-434
7.2
2018-10-19 CVE-2018-18428 Information Exposure vulnerability in Tp-Link Tl-Sc3130 Firmware 1.6.18P12121101
TP-Link TL-SC3130 1.6.18P12_121101 devices allow unauthenticated RTSP stream access, as demonstrated by a /jpg/image.jpg URI.
network
low complexity
tp-link CWE-200
7.5
2018-10-01 CVE-2018-15702 Cross-Site Request Forgery (CSRF) vulnerability in Tp-Link Tl-Wrn841N Firmware 0.9.14.16V0348.0
The web interface in TP-Link TL-WRN841N 0.9.1 4.16 v0348.0 is vulnerable to CSRF due to insufficient validation of the referer field.
network
low complexity
tp-link CWE-352
8.8
2018-08-15 CVE-2018-15172 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Tp-Link Tl-Wr840N Firmware 0.9.1
TP-Link WR840N devices have a buffer overflow via a long Authorization HTTP header.
network
low complexity
tp-link CWE-119
7.5
2018-07-19 CVE-2018-14336 Improper Input Validation vulnerability in Tp-Link Wr840N
TP-Link WR840N devices allow remote attackers to cause a denial of service (connectivity loss) via a series of packets with random MAC addresses.
network
low complexity
tp-link CWE-20
7.5
2018-07-02 CVE-2018-12577 OS Command Injection vulnerability in Tp-Link Tl-Wr841N Firmware 0.9.14.16
The Ping and Traceroute features on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow authenticated blind Command Injection.
network
low complexity
tp-link CWE-78
8.8
2018-07-02 CVE-2018-12574 Cross-Site Request Forgery (CSRF) vulnerability in Tp-Link Tl-Wr841N Firmware 0.9.14.16
CSRF exists for all actions in the web interface on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices.
network
low complexity
tp-link CWE-352
8.8
2018-06-23 CVE-2018-12694 Improper Input Validation vulnerability in Tp-Link Tl-Wa850Re Firmware
TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote attackers to cause a denial of service (reboot) via data/reboot.json.
network
low complexity
tp-link CWE-20
7.5
2018-06-23 CVE-2018-12692 OS Command Injection vulnerability in Tp-Link Tl-Wa850Re Firmware
TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the wps_setup_pin parameter to /data/wps.setup.json.
network
low complexity
tp-link CWE-78
8.8