Vulnerabilities > TP Link > TL Wdr4300 Firmware > High

DATE CVE VULNERABILITY TITLE RISK
2019-10-25 CVE-2013-4848 Cross-Site Request Forgery (CSRF) vulnerability in Tp-Link Tl-Wdr4300 Firmware 3.13.31
TP-Link TL-WDR4300 version 3.13.31 has multiple CSRF vulnerabilities.
network
low complexity
tp-link CWE-352
8.8
8.8
2019-01-18 CVE-2019-6487 OS Command Injection vulnerability in Tp-Link products
TP-Link WDR Series devices through firmware v3 (such as TL-WDR5620 V3.0) are affected by command injection (after login) leading to remote code execution, because shell metacharacters can be included in the weather get_weather_observe citycode field.
network
low complexity
tp-link CWE-78
8.8
8.8