TP-Link

Records637All Threatist records

Exploited (KEV)6In CISA KEV

CVSS critical100CVSS 9.0–10.0

CVSS high356CVSS 7.0–8.9

Exploited now

TP-Link records in CISA KEV

TI-2023-27456 TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability CRITICAL 86KEV 2025-09-03 TI-2025-08589 TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability CRITICAL 96KEV 2025-09-03 TI-2020-14907 TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability CRITICAL 97KEV 2025-09-02 TI-2023-16571 TP-Link Multiple Routers Command Injection Vulnerability CRITICAL 97KEV 2025-06-16 TI-2023-01313 TP-Link Archer AX-21 Command Injection Vulnerability CRITICAL 97KEV 2023-05-01 TI-2015-02672 TP-Link Multiple Archer Devices Directory Traversal Vulnerability CRITICAL 90KEV 2022-03-25

Components

Products in the NVD configurations · select one to filter the records

Tl-wr841n Firmware 39 records CRITICAL Tl-wr886n Firmware 39 records MEDIUM Er5110g Firmware 25 records LOW Er5120g Firmware 25 records LOW Er5510g Firmware 25 records LOW Er5520g Firmware 25 records LOW R4149g Firmware 25 records LOW R4239g Firmware 25 records LOW

Records

12 records in Eap225 Firmware · all components

TI-2023-26739 CVE-2023-49074 · GHSA-2f37-h53v-66vq

A denial of service vulnerability exists in the TDDP functionality of Tp-Link AC1350…

MEDIUM 48

A denial of service vulnerability exists in the TDDP functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.13479 Published 2024-04-09 No fix listed CWE-749

TI-2023-26797 CVE-2023-49134 · GHSA-cvxw-g73w-j934

Command injection in TP-Link AC1350 Wireless MU-MIMO Gigabit Access Point

MEDIUM 46

A command execution vulnerability exists in the tddpd enable_test_mode functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926 and Tp-Link N300 Wireless Access Point (EAP11…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01749 Published 2024-04-09 No fix listed CWE-829

TI-2023-26796 CVE-2023-49133 · GHSA-fqq4-qr43-h5jq

Command injection in TP-Link AC1350 Wireless MU-MIMO Gigabit Access Point

MEDIUM 46

A command execution vulnerability exists in the tddpd enable_test_mode functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926 and Tp-Link N300 Wireless Access Point (EAP11…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01749 Published 2024-04-09 No fix listed CWE-829

TI-2023-27288 CVE-2023-49913 · GHSA-ph38-v5mc-q38p

Stack-based buffer overflow in TP-Link AC1350 Wireless MU-MIMO Gigabit Access Point

MEDIUM 44

A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01919 Published 2024-04-09 No fix listed CWE-121

TI-2023-27287 CVE-2023-49912 · GHSA-23gq-p5v8-4xh3

Stack-based buffer overflow in TP-Link AC1350 Wireless MU-MIMO Gigabit Access Point

MEDIUM 44

A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01822 Published 2024-04-09 No fix listed CWE-121

TI-2023-27286 CVE-2023-49911 · GHSA-jrf6-frj2-w4m8

Stack-based buffer overflow in TP-Link AC1350 Wireless MU-MIMO Gigabit Access Point

MEDIUM 44

A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01822 Published 2024-04-09 No fix listed CWE-121

TI-2023-27285 CVE-2023-49910 · GHSA-h3v7-q8j4-9rw9

Stack-based buffer overflow in TP-Link AC1350 Wireless MU-MIMO Gigabit Access Point

MEDIUM 44

A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01822 Published 2024-04-09 No fix listed CWE-121

TI-2023-27284 CVE-2023-49909 · GHSA-hrxg-27x5-39h2

Stack-based buffer overflow in TP-Link AC1350 Wireless MU-MIMO Gigabit Access Point

MEDIUM 44

A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01822 Published 2024-04-09 No fix listed CWE-121

TI-2023-27283 CVE-2023-49908 · GHSA-9954-8wq3-xgxf

Stack-based buffer overflow in TP-Link AC1350 Wireless MU-MIMO Gigabit Access Point

MEDIUM 44

A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01822 Published 2024-04-09 No fix listed CWE-121

TI-2023-27282 CVE-2023-49907 · GHSA-89hm-2q6m-373c

Stack-based buffer overflow in TP-Link AC1350 Wireless MU-MIMO Gigabit Access Point

MEDIUM 44

A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01822 Published 2024-04-09 No fix listed CWE-121

TI-2023-27281 CVE-2023-49906 · GHSA-3q37-hvwq-f7ph

Stack-based buffer overflow in TP-Link AC1350 Wireless MU-MIMO Gigabit Access Point

MEDIUM 44

A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01919 Published 2024-04-09 No fix listed CWE-121

TI-2023-26559 CVE-2023-48724 · GHSA-86r8-h4wj-hhjg

Stack-based buffer overflow in TP-Link AC1350 Wireless MU-MIMO Gigabit Access Point

MEDIUM 42

A memory corruption vulnerability exists in the web interface functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01484 Published 2024-04-09 No fix listed CWE-121

Open these records in search →