Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
649 results · page 5 of 13
Oct 20, 2025An arbitrary OS command may be executed on the product by a remote unauthenticated attacker.CVE-2025-6542 · Network & remote access · TP-Link Systems Inc. · reported by f23511db-6c3e-4e32-a477-6aa17d310630Critical 9.3
An arbitrary OS command may be executed on the product by a remote unauthenticated attacker.
- Product
- Omada gateways
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.omadanetworks.comomadanetworks.com
Oct 20, 2025An arbitrary OS command may be executed on the product by the user who can log in to the web management interface.CVE-2025-6541 · Network & remote access · TP-Link Systems Inc. · reported by f23511db-6c3e-4e32-a477-6aa17d310630High 8.6
An arbitrary OS command may be executed on the product by the user who can log in to the web management interface.
- Product
- Omada gateways
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.omadanetworks.comomadanetworks.com
Oct 2, 2025TP-Link AX1800 WiFi 6 Router (Archer AX21) devices allow unauthenticated attackers (on the LAN) to execute arbitrary code as root via the db_dir field to minidlCVE-2023-28760 · Other software · reported by MITREHigh 7.5
TP-Link AX1800 WiFi 6 Router (Archer AX21) devices allow unauthenticated attackers (on the LAN) to execute arbitrary code as root via the db_dir field to minidlnad. The attacker obtains the ability to modify files.db, and that can be used to reach a stack-based buffer overflow in minidlna-1.1.2/upnpsoap.c. Exploitation requires that a USB flash drive is connected to the router (customers often do this to make a \\192.168.0.1 share available on their local network).
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgist.github.comtecsecurity.io
Sep 30, 2025The attacker may obtain root access by connecting to the UART port and this vulnerability requires the attacker to have the physical access to the device.CVE-2025-10991 · Network & remote access · TP-Link Systems Inc. · reported by f23511db-6c3e-4e32-a477-6aa17d310630High 7
The attacker may obtain root access by connecting to the UART port and this vulnerability requires the attacker to have the physical access to the device. This issue affects Tapo D230S1 V1.20: before 1.2.2 Build 20250907.
- Product
- Tapo D230S1 V1.20
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 9, 2025An issue in TP-Link AX10 Ax1500 v.1.3.10 Build (20230130) allows a remote attacker to obtain sensitive informationCVE-2025-29089 · Other software · reported by MITREHigh 7.5
An issue in TP-Link AX10 Ax1500 v.1.3.10 Build (20230130) allows a remote attacker to obtain sensitive information
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordintrix.com.aulinkedin.com
Sep 6, 2025An authenticated attacker may remotely execute arbitrary code via the CWMP binary on the devices AX10 and AX1500.CVE-2025-9961 · Network & remote access · TP-Link Systems Inc. · reported by f23511db-6c3e-4e32-a477-6aa17d310630High 8.6
An authenticated attacker may remotely execute arbitrary code via the CWMP binary on the devices AX10 and AX1500. The exploit can only be conducted via a Man-In-The-Middle (MITM) attack. This issue affects AX10 V1/V1.2/V2/V2.6/V3/V3.6: before 1.2.1; AX1500 V1/V1.20/V1.26/V1.60/V1.80/V2.60/V3.6: before 1.3.11.
- Product
- AX10 V1/V1.2/V2/V2.6/V3/V3.6
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.byteray.co.uktp-link.com
Aug 29, 2025TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection VulnerabilityCVE-2025-9377 · Network & remote access · TP-Link · reported by f23511db-6c3e-4e32-a477-6aa17d310630ExploitedHigh 8.6
TP-Link Archer C7(EU) and TL-WR841N/ND(MS) contain an OS command injection vulnerability that exists in the Parental Control page. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.
- Product
- Multiple Routers
- On CISA’s list since
- Sep 3, 2025 (federal fix deadline Sep 24, 2025)
- What to do
- Attackers are using this now. Install TP-Link’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Full record and what to do →NVD recordCISA catalogtp-link.comtp-link.com
Aug 25, 2025The TP-Link KP303 Smartplug can be issued unauthenticated protocol commands that may cause unintended power-off condition and potential information leak.CVE-2025-8627 · Network & remote access · TP-Link Systems Inc. · reported by f23511db-6c3e-4e32-a477-6aa17d310630High 8.7
The TP-Link KP303 Smartplug can be issued unauthenticated protocol commands that may cause unintended power-off condition and potential information leak. This issue affects TP-Link KP303 (US) Smartplug: before 1.1.0.
- Product
- TP-Link KP303 (US) Smartplug
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 29, 2025A vulnerability has been found in TP-Link TL-WR841N V11.CVE-2025-53715 · Network & remote access · TP-Link Systems INC. · reported by f23511db-6c3e-4e32-a477-6aa17d310630Medium 6.9
A vulnerability has been found in TP-Link TL-WR841N V11. The vulnerability exists in the /userRpm/Wan6to4TunnelCfgRpm.htm file due to missing input parameter validation, which may lead to the buffer overflow to cause a crash of the web service and result in a denial-of-service (DoS) condition. The attack may be launched remotely. This vulnerability only affects products that are no longer supported by the maintainer.
- Product
- TL-WR841N V11
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 29, 2025A vulnerability has been found in TP-Link TL-WR841N V11.CVE-2025-53714 · Network & remote access · TP-Link Systems INC. · reported by f23511db-6c3e-4e32-a477-6aa17d310630Medium 6.9
A vulnerability has been found in TP-Link TL-WR841N V11. The vulnerability exists in the /userRpm/WzdWlanSiteSurveyRpm_AP.htm file due to missing input parameter validation, which may lead to the buffer overflow to cause a crash of the web service and result in a denial-of-service (DoS) condition. The attack may be launched remotely. This vulnerability only affects products that are no longer supported by the maintainer.
- Product
- TL-WR841N V11
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 29, 2025A vulnerability has been found in TP-Link TL-WR841N V11.CVE-2025-53713 · Network & remote access · TP-Link Systems INC. · reported by f23511db-6c3e-4e32-a477-6aa17d310630Medium 6.9
A vulnerability has been found in TP-Link TL-WR841N V11. The vulnerability exists in the /userRpm/WlanNetworkRpm_APC.htm file due to missing input parameter validation, which may lead to the buffer overflow to cause a crash of the web service and result in a denial-of-service (DoS) condition. The attack may be launched remotely. This vulnerability only affects products that are no longer supported by the maintainer.
- Product
- TL-WR841N V11
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 29, 2025A vulnerability has been found in TP-Link TL-WR841N V11.CVE-2025-53712 · Network & remote access · TP-Link Systems INC. · reported by f23511db-6c3e-4e32-a477-6aa17d310630Medium 6.9
A vulnerability has been found in TP-Link TL-WR841N V11. The vulnerability exists in the /userRpm/WlanNetworkRpm_AP.htm file due to missing input parameter validation, which may lead to the buffer overflow to cause a crash of the web service and result in a denial-of-service (DoS) condition. The attack may be launched remotely. This vulnerability only affects products that are no longer supported by the maintainer.
- Product
- TL-WR841N V11
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 29, 2025A vulnerability has been found in TP-Link TL-WR841N v11, TL-WR842ND v2 and TL-WR494N v3.CVE-2025-53711 · Network & remote access · TP-Link Systems INC. · reported by f23511db-6c3e-4e32-a477-6aa17d310630Medium 6.9
A vulnerability has been found in TP-Link TL-WR841N v11, TL-WR842ND v2 and TL-WR494N v3. The vulnerability exists in the /userRpm/WlanNetworkRpm.htm file due to missing input parameter validation, which may lead to the buffer overflow to cause a crash of the web service and result in a denial-of-service (DoS) condition. The attack may be launched remotely. This vulnerability only affects products that are no longer supported by the maintainer.
- Product
- TL-WR841N v11
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 22, 2025An unauthenticated OS command injection vulnerability exists in VIGI NVR1104H-4P V1 and VIGI NVR2016H-16MP V2.This issue affects VIGI NVR1104H-4P V1: before 1.1CVE-2025-7724 · Network & remote access · TP-Link Systems Inc. · reported by f23511db-6c3e-4e32-a477-6aa17d310630High 8.7
An unauthenticated OS command injection vulnerability exists in VIGI NVR1104H-4P V1 and VIGI NVR2016H-16MP V2.This issue affects VIGI NVR1104H-4P V1: before 1.1.5 Build 250518; VIGI NVR2016H-16MP V2: before 1.3.1 Build 250407.
- Product
- VIGI NVR1104H-4P V1
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtp-link.comtp-link.com
Jul 22, 2025A command injection vulnerability exists that can be exploited after authentication in VIGI NVR1104H-4P V1 and VIGI NVR2016H-16MP V2.This issue affects VIGI NVRCVE-2025-7723 · Network & remote access · TP-Link Systems Inc. · reported by f23511db-6c3e-4e32-a477-6aa17d310630High 8.5
A command injection vulnerability exists that can be exploited after authentication in VIGI NVR1104H-4P V1 and VIGI NVR2016H-16MP V2.This issue affects VIGI NVR1104H-4P V1: before 1.1.5 Build 250518; VIGI NVR2016H-16MP V2: before 1.3.1 Build 250407.
- Product
- VIGI NVR1104H-4P V1
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtp-link.comtp-link.com
Jul 16, 2025A Clickjacking vulnerability in TP-Link Archer C1200 web management page allows an attacker to trick users into performing unintended actions via rendered UI CVE-2025-6983 · Network & remote access · TP-Link System Inc. · reported by f23511db-6c3e-4e32-a477-6aa17d310630Medium 5.1
A Clickjacking vulnerability in TP-Link Archer C1200 web management page allows an attacker to trick users into performing unintended actions via rendered UI layers or frames.This issue affects Archer C1200 <= 1.1.5.
- Product
- Archer C1200
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 16, 2025Use of Hard-coded Credentials in TP-Link Archer C50 V3( <= 180703)/V4( <= 250117 )/V5( <= 200407 ), and C20 V5 (<US_V5_260419 or <EU_V5_260317) alloCVE-2025-6982 · Network & remote access · TP-Link Systems Inc. · reported by f23511db-6c3e-4e32-a477-6aa17d310630Medium 6.9
Use of Hard-coded Credentials in TP-Link Archer C50 V3( <= 180703)/V4( <= 250117 )/V5( <= 200407 ), and C20 V5 (<US_V5_260419 or <EU_V5_260317) allows attackers to decrypt the config.xml files.
- Product
- Archer C50 V3
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtp-link.comtp-link.com
Jun 16, 2025A vulnerability has been found in TP-Link TL-WR940N V4 and TL-WR841N V11.CVE-2025-6151 · Network & remote access · TP-Link Systems INC. · reported by f23511db-6c3e-4e32-a477-6aa17d310630High 8.2
A vulnerability has been found in TP-Link TL-WR940N V4 and TL-WR841N V11. Affected by this issue is some unknown functionality of the file /userRpm/WanSlaacCfgRpm.htm, which may lead to buffer overflow. The attack may be launched remotely. This vulnerability only affects products that are no longer supported by the maintainer.
- Product
- TL-WR940N V4
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 9, 2025A vulnerability classified as critical has been found in TP-LINK Technologies TL-IPC544EP-W4 1.0.9 Build 240428 Rel 69493n.CVE-2025-5875 · Network & remote access · TP-LINK Technologies · reported by VulDBHigh 7.4
A vulnerability classified as critical has been found in TP-LINK Technologies TL-IPC544EP-W4 1.0.9 Build 240428 Rel 69493n. Affected is the function sub_69064 of the file /bin/main. The manipulation of the argument text leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
- Product
- TL-IPC544EP-W4
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordlocrian-lightning-dc7.notion.sitevuldb.com
May 22, 2025When a notification relating to low battery appears for a user with whom the device has been shared, tapping the notification grants full access to the power seCVE-2025-4975 · Network & remote access · TP-Link Systems Inc. · reported by f23511db-6c3e-4e32-a477-6aa17d310630Medium 4.8
When a notification relating to low battery appears for a user with whom the device has been shared, tapping the notification grants full access to the power settings of that device.
- Product
- TP-Link Tapo app
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordplay.google.comtp-link.com
May 20, 2025Stack-based buffer overflow vulnerability in the 'conn-indicator' binary running as root on the TP-Link Archer AX50 router, in firmware versions prior to 1.0.15CVE-2025-40634 · Network & remote access · TP-Link · reported by cve-coordination@incibe.esCritical 9.2
Stack-based buffer overflow vulnerability in the 'conn-indicator' binary running as root on the TP-Link Archer AX50 router, in firmware versions prior to 1.0.15 build 241203 rel61480. This vulnerability allows an attacker to execute arbitrary code on the device over LAN and WAN networks.
- Product
- Link Archer AX50
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 17, 2025A stored cross-site scripting (XSS) vulnerability in the upnp.htm page of the web Interface in TP-Link WR841N v14/v14.6/v14.8 <= Build 241230 Rel.CVE-2025-25427 · Network & remote access · TP-Link Systems Inc. · reported by f23511db-6c3e-4e32-a477-6aa17d310630High 8.6
A stored cross-site scripting (XSS) vulnerability in the upnp.htm page of the web Interface in TP-Link WR841N v14/v14.6/v14.8 <= Build 241230 Rel. 50788n allows remote attackers to inject arbitrary JavaScript code via the port mapping description. This leads to an execution of the JavaScript payload when the upnp page is loaded.
- Product
- TL-WR841N v14/v14.6/v14.8
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 11, 2025OS command injection vulnerability exists in Deco BE65 Pro firmware versions prior to "Deco BE65 Pro(JP)_V1_1.1.2 Build 20250123".CVE-2025-32107 · Network & remote access · TP-Link Corporation Limited · reported by vultures@jpcert.or.jpHigh 8
OS command injection vulnerability exists in Deco BE65 Pro firmware versions prior to "Deco BE65 Pro(JP)_V1_1.1.2 Build 20250123". If this vulnerability is exploited, an arbitrary OS command may be executed by the user who can log in to the device.
- Product
- Deco BE65 Pro
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 9, 2025This vulnerability exists in TP-Link Tapo H200 V1 IoT Smart Hub due to storage of Wi-Fi credentials in plain text within the device firmware.CVE-2025-3442 · Network & remote access · TP-Link · reported by vdisclose@cert-in.org.inMedium 4.4
This vulnerability exists in TP-Link Tapo H200 V1 IoT Smart Hub due to storage of Wi-Fi credentials in plain text within the device firmware. An attacker with physical access could exploit this by extracting the firmware and analyzing the binary data to obtain the Wi-Fi credentials stored on the vulnerable device.
- Product
- Tapo H200 V1 IoT Smart Hub
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 26, 2025TP-Link TL-WR845N devices with firmware TL-WR845N(UN)_V4_200909 and TL-WR845N(UN)_V4_190219 was discovered to contain a hardcoded password for the root account CVE-2024-57040 · Network & remote access · Tp-link · reported by MITRECritical 9.8
TP-Link TL-WR845N devices with firmware TL-WR845N(UN)_V4_200909 and TL-WR845N(UN)_V4_190219 was discovered to contain a hardcoded password for the root account which can be obtained by analyzing downloaded firmware or via a brute force attack through physical access to the router. NOTE: The supplier has stated that this issue was fixed in firmware versions 250401 or later.
- Product
- Tl-wr845n Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 13, 2025A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11, triggered by the dnsserver1 and dnsserver2 parameters at /userRpm/WanSlaacCfgRpm.htm.CVE-2025-25901 · Network & remote access · Tp-link · reported by MITREHigh 7.5
A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11, triggered by the dnsserver1 and dnsserver2 parameters at /userRpm/WanSlaacCfgRpm.htm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet.
- Product
- Tl-wr841nd Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 13, 2025A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the username and password parameters at /userRpm/PPPoEv6CfgRpm.htm.CVE-2025-25900 · Network & remote access · Tp-link · reported by MITREMedium 4.9
A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the username and password parameters at /userRpm/PPPoEv6CfgRpm.htm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet.
- Product
- Tl-wr841nd V11 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 13, 2025A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the 'gw' parameter at /userRpm/WanDynamicIpV6CfgRpm.htm.CVE-2025-25899 · Network & remote access · Tp-link · reported by MITRELow 3.5
A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the 'gw' parameter at /userRpm/WanDynamicIpV6CfgRpm.htm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet.
- Product
- Tl-wr841nd V11 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 13, 2025A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the pskSecret parameter at /userRpm/WlanSecurityRpm.htm.CVE-2025-25898 · Network & remote access · Tp-link · reported by MITREHigh 7.5
A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the pskSecret parameter at /userRpm/WlanSecurityRpm.htm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet.
- Product
- Tl-wr841nd Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 13, 2025A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the 'ip' parameter at /userRpm/WanStaticIpV6CfgRpm.htm.CVE-2025-25897 · Network & remote access · Tp-link · reported by MITREHigh 7.5
A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the 'ip' parameter at /userRpm/WanStaticIpV6CfgRpm.htm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet.
- Product
- Tl-wr841nd Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 10, 2025This vulnerability exists in Tapo C500 Wi-Fi camera due to hard-coded RSA private key embedded within the device firmware.CVE-2025-1099 · Network & remote access · TP-Link · reported by vdisclose@cert-in.org.inHigh 7
This vulnerability exists in Tapo C500 Wi-Fi camera due to hard-coded RSA private key embedded within the device firmware. An attacker with physical access could exploit this vulnerability to obtain cryptographic private keys which can then be used to perform impersonation, data decryption and man in the middle attacks on the targeted device.
- Product
- Tapo C500 V1 Wi-Fi Camera
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 7, 2025An issue in TPLINK TL-WPA 8630 TL-WPA8630(US)_V2_2.0.4 Build 20230427 allows a remote attacker to execute arbitrary code via function sub_4256CC, which allows cCVE-2024-57357 · Network & remote access · Tp-link · reported by MITREHigh 8
An issue in TPLINK TL-WPA 8630 TL-WPA8630(US)_V2_2.0.4 Build 20230427 allows a remote attacker to execute arbitrary code via function sub_4256CC, which allows command injection by injecting 'devpwd'.
- Product
- Tl-wpa8630 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 28, 2025The TP-Link Archer A20 v3 router is vulnerable to Cross-site Scripting (XSS) due to improper handling of directory listing paths in the web interface.CVE-2024-57514 · Other software · reported by MITREMedium 4.8
The TP-Link Archer A20 v3 router is vulnerable to Cross-site Scripting (XSS) due to improper handling of directory listing paths in the web interface. When a specially crafted URL is visited, the router's web page renders the directory listing and executes arbitrary JavaScript embedded in the URL. This allows the attacker to inject malicious code into the page, executing JavaScript on the victim's browser, which could then be used for further malicious actions. The vulnerability was identified in the 1.0.6 Build 20231011 rel.85717(5553) version.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2025A vulnerability classified as problematic has been found in TP-Link TL-SG108E 1.0.0 Build 20201208 Rel.CVE-2025-0730 · Network & remote access · TP-Link · reported by VulDBMedium 6.3
A vulnerability classified as problematic has been found in TP-Link TL-SG108E 1.0.0 Build 20201208 Rel. 40304. Affected is an unknown function of the file /usr_account_set.cgi of the component HTTP GET Request Handler. The manipulation of the argument username/password leads to use of get request method with sensitive query strings. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 1.0.0 Build 20250124 Rel. 54920(Beta) is able to address this issue. It is recommended to upgrade the affected component. The vendor was contacted early. They reacted very professional and provided a pre-fix version for their customers.
- Product
- TL-SG108E
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comstatic.tp-link.com
Jan 27, 2025A vulnerability was found in TP-Link TL-SG108E 1.0.0 Build 20201208 Rel.CVE-2025-0729 · Network & remote access · TP-Link · reported by VulDBMedium 6.9
A vulnerability was found in TP-Link TL-SG108E 1.0.0 Build 20201208 Rel. 40304. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to clickjacking. The attack may be initiated remotely. Upgrading to version 1.0.0 Build 20250124 Rel. 54920(Beta) is able to address this issue. It is recommended to upgrade the affected component. The vendor was contacted early. They reacted very professional and provided a pre-fix version for their customers.
- Product
- TL-SG108E
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comstatic.tp-link.com
Jan 9, 2025TP-Link TL-WR940N V3 and V4 with firmware 3.16.9 and earlier contain a buffer overflow via the dnsserver1 and dnsserver2 parameters at /userRpm/Wan6to4TunnelCfgCVE-2024-54887 · Network & remote access · Tp-link · reported by MITREHigh 8
TP-Link TL-WR940N V3 and V4 with firmware 3.16.9 and earlier contain a buffer overflow via the dnsserver1 and dnsserver2 parameters at /userRpm/Wan6to4TunnelCfgRpm.htm. This vulnerability allows an authenticated attacker to execute arbitrary code on the remote device in the context of the root user.
- Product
- Tl-wr940n Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 10, 2024TP-Link TL-WR845N(UN)_V4_190219 was discovered to transmit credentials in base64 encoded form, which can be easily decoded by an attacker executing a man-in-theCVE-2024-46341 · Network & remote access · Tp-link · reported by MITREHigh 8
TP-Link TL-WR845N(UN)_V4_190219 was discovered to transmit credentials in base64 encoded form, which can be easily decoded by an attacker executing a man-in-the-middle attack.
- Product
- Tl-wr845n Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurity.iiita.ac.insecurity.iiita.ac.in
Dec 10, 2024TL-WR845N(UN)_V4_201214, TP-Link TL-WR845N(UN)_V4_200909, and TL-WR845N(UN)_V4_190219 was discovered to transmit user credentials in plaintext after executing aCVE-2024-46340 · Network & remote access · Tp-link · reported by MITRECritical 9.8
TL-WR845N(UN)_V4_201214, TP-Link TL-WR845N(UN)_V4_200909, and TL-WR845N(UN)_V4_190219 was discovered to transmit user credentials in plaintext after executing a factory reset.
- Product
- Tl-wr845n Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurity.iiita.ac.insecurity.iiita.ac.in
Dec 10, 2024TP-Link TL-WR845N(UN)_V4_201214, TL-WR845N(UN)_V4_200909 and TL-WR845N(UN)_V4_190219 were discovered to contain weak default credentials for the Administrator aCVE-2024-50699 · Network & remote access · Tp-link · reported by MITREHigh 8
TP-Link TL-WR845N(UN)_V4_201214, TL-WR845N(UN)_V4_200909 and TL-WR845N(UN)_V4_190219 were discovered to contain weak default credentials for the Administrator account.
- Product
- Tl-wr845n Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurity.iiita.ac.insecurity.iiita.ac.in
Dec 8, 2024A vulnerability, which was classified as critical, was found in TP-Link VN020 F3v(T) TT_V6.2.1021.CVE-2024-12344 · Network & remote access · TP-Link · reported by VulDBMedium 5.3
A vulnerability, which was classified as critical, was found in TP-Link VN020 F3v(T) TT_V6.2.1021. This affects an unknown part of the component FTP USER Command Handler. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
- Product
- VN020 F3v(T)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 8, 2024A vulnerability classified as critical has been found in TP-Link VN020 F3v(T) TT_V6.2.1021.CVE-2024-12343 · Network & remote access · TP-Link · reported by VulDBHigh 7.1
A vulnerability classified as critical has been found in TP-Link VN020 F3v(T) TT_V6.2.1021. Affected is an unknown function of the file /control/WANIPConnection of the component SOAP Request Handler. The manipulation of the argument NewConnectionType leads to buffer overflow. The attack needs to be done within the local network. The exploit has been disclosed to the public and may be used.
- Product
- VN020 F3v(T)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 8, 2024A vulnerability was found in TP-Link VN020 F3v(T) TT_V6.2.1021.CVE-2024-12342 · Network & remote access · TP-Link · reported by VulDBHigh 7.1
A vulnerability was found in TP-Link VN020 F3v(T) TT_V6.2.1021. It has been rated as critical. This issue affects some unknown processing of the file /control/WANIPConnection of the component Incomplete SOAP Request Handler. The manipulation leads to denial of service. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may be used.
- Product
- VN020 F3v(T)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 5, 2024This vulnerability exists in the TP-Link Archer C50 due to presence of terminal access on a serial interface without proper access control.CVE-2024-54127 · Network & remote access · TP-Link · reported by vdisclose@cert-in.org.inMedium 4.3
This vulnerability exists in the TP-Link Archer C50 due to presence of terminal access on a serial interface without proper access control. An attacker with physical access could exploit this by accessing the UART shell on the vulnerable device. Successful exploitation of this vulnerability could allow the attacker to obtain Wi-Fi credentials of the targeted system.
- Product
- Archer C50 Wireless Router
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 5, 2024This vulnerability exists in the TP-Link Archer C50 due to improper signature verification mechanism in the firmware upgrade process at its web interface.CVE-2024-54126 · Network & remote access · TP-Link · reported by vdisclose@cert-in.org.inHigh 8.5
This vulnerability exists in the TP-Link Archer C50 due to improper signature verification mechanism in the firmware upgrade process at its web interface. An attacker with administrative privileges within the router’s Wi-Fi range could exploit this vulnerability by uploading and executing malicious firmware which could lead to complete compromise of the targeted device.
- Product
- Archer C50 Wireless Router
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 2, 2024An Authenticated Remote Code Execution (RCE) vulnerability affects the TP-Link Archer router series.CVE-2024-53375 · Network & remote access · tp-link · reported by MITREHigh 8
An Authenticated Remote Code Execution (RCE) vulnerability affects the TP-Link Archer router series. A vulnerability exists in the "tmp_get_sites" function of the HomeShield functionality provided by TP-Link. This vulnerability is still exploitable without the activation of the HomeShield functionality.
- Product
- archer_axe75_firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comthottysploity.github.io
Nov 29, 2024Incorrect access control in the component l_0_0.xml of TP-Link ARCHER-C7 v5 allows attackers to access sensitive information.CVE-2024-53623 · Network & remote access · tp-link · reported by MITREHigh 7.5
Incorrect access control in the component l_0_0.xml of TP-Link ARCHER-C7 v5 allows attackers to access sensitive information.
- Product
- archer_c7_firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 21, 2024TP-Link TL-IPC42C V4.0_20211227_1.0.16 is vulnerable to command injection due to the lack of malicious code verification on both the frontend and backend.CVE-2024-48288 · Network & remote access · tp-link · reported by MITREHigh 8
TP-Link TL-IPC42C V4.0_20211227_1.0.16 is vulnerable to command injection due to the lack of malicious code verification on both the frontend and backend.
- Product
- tl-ipc42c_firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 15, 2024A vulnerability, which was classified as critical, has been found in TP-Link VN020 F3v(T) TT_V6.2.1021.CVE-2024-11237 · Network & remote access · TP-Link · reported by VulDBHigh 8.7
A vulnerability, which was classified as critical, has been found in TP-Link VN020 F3v(T) TT_V6.2.1021. Affected by this issue is some unknown functionality of the component DHCP DISCOVER Packet Parser. The manipulation of the argument hostname leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
- Product
- VN020 F3v(T)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 4, 2024This vulnerability exists in TP-Link IoT Smart Hub due to storage of Wi-Fi credentials in plain text within the device firmware.CVE-2024-10523 · Network & remote access · TP-Link · reported by vdisclose@cert-in.org.inMedium 4.4
This vulnerability exists in TP-Link IoT Smart Hub due to storage of Wi-Fi credentials in plain text within the device firmware. An attacker with physical access could exploit this by extracting the firmware and analyzing the binary data to obtain the Wi-Fi credentials stored on the vulnerable device.
- Product
- TP-Link Tapo H100 IoT Smart Hub
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 1, 2024TP Link MR200 V4 Firmware version 210201 was discovered to contain a null-pointer-dereference in the web administration panel on /cgi/login via the sign, ActionCVE-2024-22733 · Network & remote access · tp-link · reported by MITREHigh 7.5
TP Link MR200 V4 Firmware version 210201 was discovered to contain a null-pointer-dereference in the web administration panel on /cgi/login via the sign, Action or LoginStatus query parameters which could lead to a denial of service by a local or remote unauthenticated attacker.
- Product
- tl-mr200_v4_firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.