Threat database

246 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.2	EPSS 3.4%	CVE-2023-46683ER7206 Omada Gigabit VPN Router · OS Command Injection High7.2EPSS 3.4%2024-02-06CVE Database V5CVE-2023-46683 A post authentication command injection vulnerability exists when configuring the wireguard VPN functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection . An attacker can make an authenticated HTTP request to trigger this vulnerability. EPSS 3.4%Vulnerability Tp-Link #cwe-78 Germany+6	CVE Database V5	2024-02-06
High	7.2	EPSS 3.4%	CVE-2023-47617ER7206 Omada Gigabit VPN Router · OS Command Injection High7.2EPSS 3.4%2024-02-06CVE Database V5CVE-2023-47617 A post authentication command injection vulnerability exists when configuring the web group member of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an authenticated HTTP request to trigger this vulnerability. EPSS 3.4%Vulnerability Tp-Link #cwe-78 Germany+5	CVE Database V5	2024-02-06
High	8.8	EPSS 0.5%	CVE-2024-21773Archer AX3000 · Information disclosure High8.8EPSS 0.5%2024-01-10CVE Database V5CVE-2024-21773 Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product from the LAN port or Wi-Fi to execute arbitrary OS commands on the product that has pre-specified target devices and blocked URLs in parental control settings. EPSS 0.5%Vulnerability TP-Link Germany France+8	CVE Database V5	2024-01-10
HighExploited in the wild	8.8	KEVEPSS 41%	CVE-2023-33538Multiple Routers · n/a High8.8KEVEPSS 41%2023-06-07CVE Database V5CVE-2023-33538 TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerability via the component /userRpm/WlanNetworkRpm . KEVEPSS 41%Vulnerability TP-Link Germany France+6	CVE Database V5	2023-06-07
HighExploited in the wild	8.8	KEVEPSS 99%	CVE-2023-1389TP-Link Archer AX21 (AX1800) · Command Injection High8.8KEVEPSS 99%2023-03-15CVE Database V5CVE-2023-1389 TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability in the country form of the /cgi-bin/luci;stok=/locale endpoint on the web management interface. Specifically, the country parameter of the write operation was not sanitized before being used in a call to popen(), allowing an unauthenticated attacker to inject commands, which would be run as root, with a simple POST request. KEVEPSS 99%Vulnerability TP-Link Germany France+8	CVE Database V5	2023-03-15
HighExploited in the wild	7.5	KEVEPSS 83%	CVE-2015-3035Multiple Archer Devices · TP-Link Multiple Archer Devices Directory Traversal Vulnerability High7.5KEVEPSS 83%2022-03-25CISA KEVCVE-2015-3035 A directory traversal vulnerability exists in multiple TP-Link Archer devices that allows remote attackers to read arbitrary files by using '..' sequences in the PATH_INFO to the login/ endpoint. This vulnerability has been exploited in the wild and is considered high severity. KEVEPSS 83%Vulnerability TP-Link #exploited-in-the-wild	CISA KEV	2022-03-25

Showing 241–246 of 246 results