TP-Link

Records637All Threatist records

Exploited (KEV)6In CISA KEV

CVSS critical100CVSS 9.0–10.0

CVSS high356CVSS 7.0–8.9

Exploited now

TP-Link records in CISA KEV

TI-2023-27456 TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability CRITICAL 86KEV 2025-09-03 TI-2025-08589 TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability CRITICAL 96KEV 2025-09-03 TI-2020-14907 TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability CRITICAL 97KEV 2025-09-02 TI-2023-16571 TP-Link Multiple Routers Command Injection Vulnerability CRITICAL 97KEV 2025-06-16 TI-2023-01313 TP-Link Archer AX-21 Command Injection Vulnerability CRITICAL 97KEV 2023-05-01 TI-2015-02672 TP-Link Multiple Archer Devices Directory Traversal Vulnerability CRITICAL 90KEV 2022-03-25

Components

Products in the NVD configurations · select one to filter the records

Tl-wr841n Firmware 39 records CRITICAL Tl-wr886n Firmware 39 records MEDIUM Er5110g Firmware 25 records LOW Er5120g Firmware 25 records LOW Er5510g Firmware 25 records LOW Er5520g Firmware 25 records LOW R4149g Firmware 25 records LOW R4239g Firmware 25 records LOW

Records

13 records in Ac1750 Firmware · all components

TI-2020-17194 CVE-2020-28347 · GHSA-3685-2v7g-3c6v

tdpServer on TP-Link Archer A7 AC1750 devices before 201029 allows remote attackers to…

HIGH 81

tdpServer on TP-Link Archer A7 AC1750 devices before 201029 allows remote attackers to execute arbitrary code via the slave_mac parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.7497 Published 2020-11-08 No fix listed CWE-78

TI-2020-08763 CVE-2020-10882 · GHSA-264q-ch9j-7v9c

OS command injection in TP-Link Archer A7

HIGH 66

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.41097 Published 2020-03-25 No fix listed CWE-78

TI-2020-08765 CVE-2020-10884 · GHSA-2gp5-7cf4-978c

Hard-coded credentials in TP-Link Archer A7

HIGH 65

This vulnerability allows network-adjacent attackers execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.38843 Published 2020-03-25 No fix listed CWE-321

TI-2020-08762 CVE-2020-10881 · GHSA-8w5p-3q5j-2w9h

Stack-based buffer overflow in TP-Link Archer A7

MEDIUM 54

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.09282 Published 2020-03-25 No fix listed CWE-121

TI-2020-08766 CVE-2020-10885 · GHSA-vxvp-772h-vpg4

Improper input validation in TP-Link Archer A7

MEDIUM 51

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06534 Published 2020-03-25 No fix listed CWE-20

TI-2020-08767 CVE-2020-10886 · GHSA-wxq4-hr45-c485

OS command injection in TP-Link Archer A7

MEDIUM 50

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04951 Published 2020-03-25 No fix listed CWE-78

TI-2020-08769 CVE-2020-10888 · GHSA-qvc8-7wwv-2g2h

Improper authentication in TP-Link Archer A7

MEDIUM 49

This vulnerability allows remote attackers to bypass authentication on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04178 Published 2020-03-25 No fix listed CWE-287

TI-2020-08768 CVE-2020-10887 · GHSA-4mxh-xfwq-hpgj

Protection mechanism failure in TP-Link Archer A7

MEDIUM 48

This vulnerability allows a firewall bypass on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03693 Published 2020-03-25 No fix listed CWE-693

TI-2021-08786 CVE-2021-27246 · GHSA-5q6x-hwjj-x4pq

Stack-based buffer overflow in TP-Link AC1750

MEDIUM 44

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 AC1750 1.0.15 routers.

CVSS 3.1HIGH 8.0 Adjacent network No auth User interaction EPSS 0.06598 Published 2021-04-14 No fix listed CWE-121

TI-2022-08232 CVE-2022-24354 · GHSA-m74j-vg2v-q7jj

Integer overflow in TP-Link AC1750

MEDIUM 42

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1750 prior to 1.1.4 Build 20211022 rel.59103(5553) routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01788 Published 2022-02-18 No fix listed CWE-190

TI-2020-08764 CVE-2020-10883 · GHSA-x5q7-vw6g-xc6c

Incorrect permission assignment in TP-Link Archer A7

MEDIUM 42

This vulnerability allows local attackers to escalate privileges on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.05271 Published 2020-03-25 No fix listed CWE-732

TI-2022-08231 CVE-2022-24353 · GHSA-52gc-5pjh-wc34

Out-of-bounds read in TP-Link AC1750

MEDIUM 41

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1750 1.1.4 Build 20211022 rel.59103(5553) routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00739 Published 2023-03-28 No fix listed CWE-125

TI-2022-08230 CVE-2022-24352 · GHSA-vqxq-2jqq-9chr

Out-of-bounds read in TP-Link AC1750

MEDIUM 41

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1750 prior to 211210 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00739 Published 2023-03-28 Fixed in 211210 CWE-125

Open these records in search →