Vulnerabilities > TP Link > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-03-28 CVE-2022-26641 Classic Buffer Overflow vulnerability in Tp-Link Tl-Wr840N Firmware 0.9.1.4.16
TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the httpRemotePort parameter.
network
low complexity
tp-link CWE-120
6.5
2022-03-28 CVE-2022-26642 Classic Buffer Overflow vulnerability in Tp-Link Tl-Wr840N Firmware 0.9.1.4.16
TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the X_TP_ClonedMACAddress parameter.
network
low complexity
tp-link CWE-120
6.5
2022-03-10 CVE-2021-44032 Unspecified vulnerability in Tp-Link Omada Software Controller
TP-Link Omada SDN Software Controller before 5.0.15 does not check if the authentication method specified in a connection request is allowed.
network
low complexity
tp-link
5.0
2022-02-25 CVE-2022-25062 Integer Overflow or Wraparound vulnerability in Tp-Link Tl-Wr840N Firmware 6.20180709
TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain an integer overflow via the function dm_checkString.
network
low complexity
tp-link CWE-190
5.0
2022-02-08 CVE-2021-44864 Classic Buffer Overflow vulnerability in Tp-Link Wn886N Firmware 1.0.1
TP-Link WR886N 3.0 1.0.1 Build 150127 Rel.34123n is vulnerable to Buffer Overflow.
network
low complexity
tp-link CWE-120
4.0
2021-12-23 CVE-2021-4144 OS Command Injection vulnerability in Tp-Link Tl-Wr802N Firmware
TP-Link wifi router TL-WR802N V4(JP), with firmware version prior to 211202, is vulnerable to OS command injection.
network
low complexity
tp-link CWE-78
6.5
2021-08-19 CVE-2021-29280 Exposure of Resource to Wrong Sphere vulnerability in Tp-Link Tl-Wr840N Firmware
In TP-Link Wireless N Router WR840N an ARP poisoning attack can cause buffer overflow
4.3
2021-08-11 CVE-2021-38543 Unspecified vulnerability in Tp-Link Ue330 Firmware
TP-Link UE330 USB splitter devices through 2021-08-09, in certain specific use cases in which the device supplies power to audio-output equipment, allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack.
network
tp-link
4.3
2021-06-15 CVE-2021-28857 Insufficiently Protected Credentials vulnerability in Tp-Link Tl-Wpa4220 Firmware 4.0.2
TP-Link's TL-WPA4220 4.0.2 Build 20180308 Rel.37064 username and password are sent via the cookie.
network
low complexity
tp-link CWE-522
5.0
2021-06-10 CVE-2021-31658 Improper Validation of Array Index vulnerability in Tp-Link Tl-Sg2005 Firmware and Tl-Sg2008 Firmware
TP-Link TL-SG2005, TL-SG2008, etc.
network
tp-link CWE-129
5.8