İçeriğe atla
Noroxi

TP-Link kayıtları

tp-link üreticisine ait 554 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
6 · %1,1
Silahlaştırılmış
13 · %2,3
Pre-auth RCE
84
Düzeltme kaydı olan
%2,3
Yayından KEV’e ortanca
615 gün

Yıllara göre kayıt

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 22
  8. 23
  9. 24
  10. 25
  11. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

554 kayıt
  • CVE-2023-1389
    95Hemen

    TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability in the country form o

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %100

    tp-link · archer ax21 firmware15 Mar 2023

  • CVE-2015-3035
    85Hemen

    Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0)

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %84

    tp-link · tl-wr741nd firmware21 Nis 2015

  • CVE-2023-33538
    77Bu hafta

    TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerability via the component

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %42

    tp-link · tl-wr940n firmware7 Haz 2023

  • CVE-2025-9377
    74Bu hafta

    Authenticated RCE via Parental Control command injection

    YüksekCVSS 8,6KEVSilahlaştırılmışEPSS %34

    tp-link · tl-wr841n firmware29 Ağu 2025

  • CVE-2020-24363
    71Bu hafta

    TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %21

    tp-link · tl-wa855re firmware31 Ağu 2020

  • CVE-2022-37860
    63Bu hafta

    The web configuration interface of the TP-Link M7350 V3 with firmware version 190531 is affected by a pre-authentication command injection v

    KritikCVSS 9,8İstismar yokEPSS %80

    tp-link · m7350 firmware12 Eyl 2022

  • CVE-2021-41653
    62Bu hafta

    The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840N(EU)_V5_171211 is vulnerable to remote code execution

    KritikCVSS 9,8Kavram kanıtıEPSS %76

    tp-link · tl-wr840n firmware13 Kas 2021

  • CVE-2020-28347
    62Bu hafta

    tdpServer on TP-Link Archer A7 AC1750 devices before 201029 allows remote attackers to execute arbitrary code via the slave_mac parameter.

    KritikCVSS 9,8SilahlaştırılmışEPSS %75

    tp-link · ac1750 firmware8 Kas 2020

  • CVE-2013-2578
    62Bu hafta

    cgi-bin/admin/servetest in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware L

    KritikCVSS 10,0SilahlaştırılmışEPSS %74

    tp-link · tl-sc313011 Eki 2013

  • CVE-2021-4045
    61Bu hafta

    TP-LINK Tapo C200 remote code execution vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %72

    tp-link · tapo c200 firmware10 Mar 2022

  • CVE-2023-50224
    61Bu hafta

    TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability

    OrtaCVSS 6,5KEVSilahlaştırılmışEPSS %16

    tp-link · tl-wr841n firmware2 May 2024

  • CVE-2018-11714
    59Planlayın

    An issue was discovered on TP-Link TL-WR840N v5 00000005 0.9.1 3.16 v0001.0 Build 170608 Rel.58696n and TL-WR841N v13 00000013 0.9.1 4.16 v0

    KritikCVSS 9,8Kavram kanıtıEPSS %68

    tp-link · tl-wr840n firmware4 Haz 2018

  • CVE-2020-12109
    57Planlayın

    Certain TP-Link devices allow Command Injection.

    YüksekCVSS 8,8SilahlaştırılmışEPSS %74

    tp-link · nc200 firmware4 May 2020

  • CVE-2022-25061
    57Planlayın

    TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_setIp6DefaultRoute.

    KritikCVSS 9,8Kavram kanıtıEPSS %59

    tp-link · tl-wr840n firmware25 Şub 2022

  • CVE-2012-5687
    52Planlayın

    Directory traversal vulnerability in the web-based management feature on the TP-LINK TL-WR841N router with firmware 3.13.9 build 120201 Rel.

    YüksekCVSS 7,8SilahlaştırılmışEPSS %69

    tp-link · tl-wr841n1 Kas 2012

  • CVE-2020-9374
    52Planlayın

    On TP-Link TL-WR849N 0.9.1 4.16 devices, a remote command execution vulnerability in the diagnostics area can be exploited when an attacker

    KritikCVSS 9,8Kavram kanıtıEPSS %43

    tp-link · tl-wr849n firmware24 Şub 2020

  • CVE-2013-2573
    52Planlayın

    A Command Injection vulnerability exists in the ap parameter to the /cgi-bin/mft/wireless_mft.cgi file in TP-Link IP Cameras TL-SC 3130, TL-

    KritikCVSS 9,8Kavram kanıtıEPSS %42

    tp-link · tl-sc 3130g firmware29 Oca 2020

  • CVE-2021-44827
    51Planlayın

    There is remote authenticated OS command injection on TP-Link Archer C20i 0.9.1 3.2 v003a.0 Build 170221 Rel.55462n devices vie the X_TP_Ext

    YüksekCVSS 8,8Kavram kanıtıEPSS %54

    tp-link · archer c20i firmware4 Mar 2022

  • CVE-2022-25060
    51Planlayın

    TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_startPing.

    KritikCVSS 9,8Kavram kanıtıEPSS %40

    tp-link · tl-wr840n firmware25 Şub 2022

  • CVE-2017-13772
    50Planlayın

    Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated users to execute arb

    YüksekCVSS 8,8Kavram kanıtıEPSS %51

    tp-link · wr940n firmware23 Eki 2017

  • CVE-2017-8220
    50Planlayın

    TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n allow remote code execution with a single HTTP reques

    KritikCVSS 9,9İstismar yokEPSS %37

    tp-link · c2 firmware25 Nis 2017

  • CVE-2022-25064
    50Planlayın

    TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a remote code execution (RCE) vulnerability via the function oal_wan6_setIpAddr

    KritikCVSS 9,8Kavram kanıtıEPSS %36

    tp-link · tl-wr840n firmware25 Şub 2022

  • CVE-2023-36355
    49Planlayın

    TP-Link TL-WR940N V4 was discovered to contain a buffer overflow via the ipStart parameter at /userRpm/WanDynamicIpV6CfgRpm.

    KritikCVSS 9,9Kavram kanıtıEPSS %32

    tp-link · tl-wr940n firmware22 Haz 2023

  • CVE-2020-35576
    48Planlayın

    A Command Injection issue in the traceroute feature on TP-Link TL-WR841N V13 (JP) with firmware versions prior to 201216 allows authenticate

    YüksekCVSS 8,8Kavram kanıtıEPSS %42

    tp-link · tl-wr841n firmware26 Oca 2021

  • CVE-2020-10882
    47Planlayın

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver:

    YüksekCVSS 8,8SilahlaştırılmışEPSS %41

    tp-link · ac1750 firmware25 Mar 2020