Page 13 of 364 results (0.012 seconds)

CVSS: 10.0EPSS: 0%CPEs: 6EXPL: 0

CVE-2022-46435

https://notcve.org/view.php?id=CVE-2022-46435

20 Dec 2022 — An issue in the firmware update process of TP-Link TL-WR941ND V2/V3 up to 3.13.9 and TL-WR941ND V4 up to 3.12.8 allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image. Un problema en el proceso de actualización de firmware de TP-Link TL-WR941ND V2/V3 hasta 3.13.9 y TL-WR941ND V4 hasta 3.12.8 permite a atacantes ejecutar código arbitrario o provocar una Denegación de Servicio (DoS) mediante la carga de un Imagen de firmware manipulada. • https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/SyvnlO9Pi •

CVSS: 4.9EPSS: 0%CPEs: 2EXPL: 0

CVE-2022-46428

https://notcve.org/view.php?id=CVE-2022-46428

20 Dec 2022 — TP-Link TL-WR1043ND V1 3.13.15 and earlier allows authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image during the firmware update process. TP-Link TL-WR1043ND V1 3.13.15 y anteriores permite a atacantes autenticados ejecutar código arbitrario o provocar una Denegación de Servicio (DoS) mediante la carga de una imagen de firmware manipulada durante el proceso de actualización del firmware. • https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1hP34Hvj • CWE-494: Download of Code Without Integrity Check •

CVSS: 10.0EPSS: 0%CPEs: 4EXPL: 0

CVE-2022-46912

https://notcve.org/view.php?id=CVE-2022-46912

20 Dec 2022 — An issue in the firmware update process of TP-Link TL-WR841N / TL-WA841ND V7 3.13.9 and earlier allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image. Un problema en el proceso de actualización de firmware de TP-Link TL-WR841N / TL-WA841ND V7 3.13.9 y anteriores permite a atacantes ejecutar código arbitrario o provocar una Denegación de Servicio (DoS) mediante la carga de una imagen de firmware manipulada. • https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/Sk6sfbTPi •

CVSS: 7.6EPSS: 0%CPEs: 2EXPL: 0

CVE-2022-46432

https://notcve.org/view.php?id=CVE-2022-46432

20 Dec 2022 — An exploitable firmware modification vulnerability was discovered on TP-Link TL-WR743ND V1. An attacker can conduct a MITM (Man-in-the-Middle) attack to modify the user-uploaded firmware image and bypass the CRC check, allowing attackers to execute arbitrary code or cause a Denial of Service (DoS). This affects v3.12.20 and earlier. Se descubrió una vulnerabilidad de modificación de firmware explotable en TP-Link TL-WR743ND V1. Un atacante puede realizar un ataque MITM (Man-in-the-Middle) para modificar la ... • https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/B1Vgv1uwo •

CVSS: 10.0EPSS: 0%CPEs: 8EXPL: 0

CVE-2022-46910

https://notcve.org/view.php?id=CVE-2022-46910

20 Dec 2022 — An issue in the firmware update process of TP-Link TL-WA901ND V1 up to v3.11.2 and TL-WA901N V2 up to v3.12.16 allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image. Un problema en el proceso de actualización de firmware de TP-Link TL-WA901ND V1 hasta v3.11.2 y TL-WA901N V2 hasta v3.12.16 permite a atacantes ejecutar código arbitrario o provocar una Denegación de Servicio (DoS) mediante la carga de una imagen de firmware manipulada. • https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/BkwzORiDo •

CVSS: 7.6EPSS: 0%CPEs: 2EXPL: 0

CVE-2022-46434

https://notcve.org/view.php?id=CVE-2022-46434

20 Dec 2022 — An issue in the firmware update process of TP-Link TL-WA7510N v1 v3.12.6 and earlier allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image. Un problema en el proceso de actualización de firmware de TP-Link TL-WA7510N v1 v3.12.6 y anteriores permite a atacantes ejecutar código arbitrario o provocar una Denegación de Servicio (DoS) mediante la carga de una imagen de firmware manipulada. • https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/rJl69Icws •

CVSS: 10.0EPSS: 0%CPEs: 4EXPL: 0

CVE-2022-46914

https://notcve.org/view.php?id=CVE-2022-46914

20 Dec 2022 — An issue in the firmware update process of TP-LINK TL-WA801N / TL-WA801ND V1 v3.12.16 and earlier allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image. Un problema en el proceso de actualización de firmware de TP-LINK TL-WA801N / TL-WA801ND V1 v3.12.16 y anteriores permite a atacantes ejecutar código arbitrario o provocar una Denegación de Servicio (DoS) mediante la carga de una imagen de firmware manipulada. • https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/BJ4czlpwi •

CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0

CVE-2022-41783

https://notcve.org/view.php?id=CVE-2022-41783

07 Dec 2022 — tdpServer of TP-Link RE300 V1 improperly processes its input, which may allow an attacker to cause a denial-of-service (DoS) condition of the product's OneMesh function. tdpServer de TP-Link RE300 V1 procesa incorrectamente su entrada, lo que puede permitir que un atacante cause una condición de Denegación de Servicio (DoS) de la función OneMesh del producto. • https://jvn.jp/en/jp/JVN29657972/index.html •

CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 1

CVE-2022-4296 – TP-Link TL-WR740N ARP resource consumption

https://notcve.org/view.php?id=CVE-2022-4296

06 Dec 2022 — A vulnerability classified as problematic has been found in TP-Link TL-WR740N. Affected is an unknown function of the component ARP Handler. The manipulation leads to resource consumption. The attack needs to be done within the local network. The exploit has been disclosed to the public and may be used. • https://vuldb.com/?id.214812 • CWE-404: Improper Resource Shutdown or Release •

CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0

CVE-2022-43635 – TP-Link TL-WR940N httpd Incorrect Implementation of Authentication Algorithm Information Disclosure Vulnerability

https://notcve.org/view.php?id=CVE-2022-43635

21 Nov 2022 — This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR940N 6_211111 3.20.1(US) routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from the incorrect implementation of the authentication algorithm. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. • https://www.zerodayinitiative.com/advisories/ZDI-22-1615 • CWE-303: Incorrect Implementation of Authentication Algorithm •