Vulnerabilities > TP Link > TL Ps310U Firmware

DATE CVE VULNERABILITY TITLE RISK
2020-08-07 CVE-2020-15057 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Tp-Link Tl-Ps310U Firmware
TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to denial-of-service the device via long input values.
low complexity
tp-link CWE-119
6.5
6.5
2020-08-07 CVE-2020-15056 Cross-site Scripting vulnerability in Tp-Link Tl-Ps310U Firmware
TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to conduct persistent XSS attacks by leveraging administrative privileges to set a crafted server name.
low complexity
tp-link CWE-79
4.3
4.3
2020-08-07 CVE-2020-15055 Improper Authentication vulnerability in Tp-Link Tl-Ps310U Firmware
TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to bypass authentication via a web-administration request that lacks a password parameter.
low complexity
tp-link CWE-287
8.8
8.8
2020-08-07 CVE-2020-15054 Insufficiently Protected Credentials vulnerability in Tp-Link Tl-Ps310U Firmware
TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic.
low complexity
tp-link CWE-522
8.8
8.8