TP-Link

Records637All Threatist records

Exploited (KEV)6In CISA KEV

CVSS critical100CVSS 9.0–10.0

CVSS high356CVSS 7.0–8.9

Exploited now

TP-Link records in CISA KEV

TI-2023-27456 TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability CRITICAL 86KEV 2025-09-03 TI-2025-08589 TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability CRITICAL 96KEV 2025-09-03 TI-2020-14907 TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability CRITICAL 97KEV 2025-09-02 TI-2023-16571 TP-Link Multiple Routers Command Injection Vulnerability CRITICAL 97KEV 2025-06-16 TI-2023-01313 TP-Link Archer AX-21 Command Injection Vulnerability CRITICAL 97KEV 2023-05-01 TI-2015-02672 TP-Link Multiple Archer Devices Directory Traversal Vulnerability CRITICAL 90KEV 2022-03-25

Components

Products in the NVD configurations · select one to filter the records

Tl-wr841n Firmware 39 records CRITICAL Tl-wr886n Firmware 39 records MEDIUM Er5110g Firmware 25 records LOW Er5120g Firmware 25 records LOW Er5510g Firmware 25 records LOW Er5520g Firmware 25 records LOW R4149g Firmware 25 records LOW R4239g Firmware 25 records LOW

Records

22 records in Tl-wr840n Firmware · all components

TI-2023-27456 CVE-2023-50224 · GHSA-g654-hw9f-49w6

Authentication bypass by spoofing in TP-Link TL-WR841N

CRITICAL 86KEV

TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.20021 Published 2024-05-03 Fixed in V11_211209, V12_230317 +4 CWE-290

TI-2021-18357 CVE-2021-41653 · GHSA-8fx7-hx38-cm88

The PING function on the TP-Link TL-WR840N EU v5 router with firmware through…

HIGH 81

The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840N(EU)_V5_171211 is vulnerable to remote code execution via a crafted payload in an IP address input field.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.76045 Published 2021-11-13 No fix listed CWE-94

TI-2018-08378 CVE-2018-11714 · GHSA-cc78-5w3j-x6q8

An issue was discovered on TP-Link TL-WR840N v5 00000005 0.9.1 3.16 v0001.0 Build 170608…

HIGH 79

An issue was discovered on TP-Link TL-WR840N v5 00000005 0.9.1 3.16 v0001.0 Build 170608 Rel.58696n and TL-WR841N v13 00000013 0.9.1 4.16 v0001.0 Build 170622 Rel.64334n devices.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.67061 Published 2018-06-04 No fix listed CWE-384

TI-2022-08817 CVE-2022-25061 · GHSA-rj4c-hx63-x3x2

TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection…

HIGH 76

TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_setIp6DefaultRoute.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.58701 Published 2022-02-25 No fix listed CWE-78

TI-2026-02790 CVE-2026-3227 · GHSA-7vvh-gmhq-282v

Authenticated Command Injection on TP-Link TL-WR802N, TL-WR841N and TL-WR840N

HIGH 72

A command injection vulnerability was identified in TP-Link TL-WR802N v4, TL-WR841N v14, and TL-WR840N v6 due to improper neutralization of special elements used in an OS command.

CVSS 4.0HIGH 8.5 Adjacent network High privileges No interaction EPSS 0.03033 Published 2026-03-13 Fixed in V4_260304, V14_260303 +1 CWE-78

TI-2022-08816 CVE-2022-25060 · GHSA-hwv5-9763-pqc4

TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection…

HIGH 70

TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_startPing.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.4015 Published 2022-02-25 No fix listed CWE-78

TI-2022-08819 CVE-2022-25064 · GHSA-66jq-wfrj-9h9w

TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a remote code execution…

HIGH 68

TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a remote code execution (RCE) vulnerability via the function oal_wan6_setIpAddr.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.36473 Published 2022-02-25 No fix listed CWE-78

TI-2020-18498 CVE-2020-36178 · GHSA-qqg6-4j54-68gr

oal_ipt_addBridgeIsolationRules on TP-Link TL-WR840N 6_EU_0.9.1_4.16 devices allows OS…

MEDIUM 54

oal_ipt_addBridgeIsolationRules on TP-Link TL-WR840N 6_EU_0.9.1_4.16 devices allows OS command injection because a raw string entered from the web interface (an IP address field) is used directly for a call to the system…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.09816 Published 2021-01-06 No fix listed CWE-78

TI-2019-11243 CVE-2019-15060 · GHSA-65mw-qrjx-v5ff

The traceroute function on the TP-Link TL-WR840N v4 router with firmware through 0.9.1…

MEDIUM 45

The traceroute function on the TP-Link TL-WR840N v4 router with firmware through 0.9.1 3.16 is vulnerable to remote code execution via a crafted payload in an IP address input field.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.04 Published 2019-08-22 No fix listed CWE-78

TI-2018-10856 CVE-2018-15172 · GHSA-j7jv-8w7c-6jr8

TP-Link WR840N devices have a buffer overflow via a long Authorization HTTP header.

MEDIUM 44

TP-Link WR840N devices have a buffer overflow via a long Authorization HTTP header.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.08195 Published 2018-08-15 No fix listed CWE-119

TI-2023-20603 CVE-2023-39471 · GHSA-ff5w-vxjm-5vxf

OS command injection in TP-Link TL-WR841N

MEDIUM 42

TP-Link TL-WR841N ated_tp Command Injection Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00913 Published 2024-05-03 No fix listed CWE-78

TI-2022-08818 CVE-2022-25062 · GHSA-rh53-49qm-wr6p

TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain an integer overflow via the…

LOW 39

TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain an integer overflow via the function dm_checkString.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03503 Published 2022-02-25 No fix listed CWE-190

TI-2018-11288 CVE-2018-15840 · GHSA-fcm9-4278-c4rv

TP-Link TL-WR840N devices allow remote attackers to cause a denial of service (networking…

LOW 37

TP-Link TL-WR840N devices allow remote attackers to cause a denial of service (networking outage) via fragmented packets, as demonstrated by an "nmap -f" command.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01858 Published 2019-03-29 No fix listed CWE-119

TI-2021-21073 CVE-2021-46122 · GHSA-8p6h-x22r-w926

Tp-Link TL-WR840N (EU) v6.20 Firmware (0.9.1 4.17 v0001.0 Build 201124 Rel.64328n) is…

LOW 35

Tp-Link TL-WR840N (EU) v6.20 Firmware (0.9.1 4.17 v0001.0 Build 201124 Rel.64328n) is vulnerable to Buffer Overflow via the Password reset feature.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01555 Published 2022-04-18 No fix listed CWE-120

TI-2022-09916 CVE-2022-26642 · GHSA-pgr2-39hw-mpmh

TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the X_TP_ClonedMACAddress parameter.

LOW 34

TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the X_TP_ClonedMACAddress parameter.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01253 Published 2022-03-28 No fix listed CWE-120

TI-2022-09915 CVE-2022-26641 · GHSA-38pf-r5mj-cxpx

TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the httpRemotePort parameter.

LOW 34

TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the httpRemotePort parameter.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01253 Published 2022-03-28 No fix listed CWE-120

TI-2022-09914 CVE-2022-26640 · GHSA-8m4h-fj8c-v497

TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the minAddress parameter.

LOW 34

TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the minAddress parameter.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01253 Published 2022-03-28 No fix listed CWE-120

TI-2022-09913 CVE-2022-26639 · GHSA-v457-62x9-vgw8

TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the DNSServers parameter.

LOW 34

TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the DNSServers parameter.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01253 Published 2022-03-28 No fix listed CWE-120

TI-2014-07733 CVE-2014-9510 · GHSA-r3hv-gpww-v5pr

Cross-site request forgery (CSRF) vulnerability in the administration console in TP-Link…

LOW 32

Cross-site request forgery (CSRF) vulnerability in the administration console in TP-Link TL-WR840N (V1) router with firmware before 3.13.27 build 141120 allows remote attackers to hijack the authentication of administrat…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00984 Published 2015-01-09 No fix listed CWE-352

TI-2022-11875 CVE-2022-29402 · GHSA-qmfg-pfxw-q9rj

TP-Link TL-WR840N EU v6.20 was discovered to contain insecure protections for its UART…

LOW 30

TP-Link TL-WR840N EU v6.20 was discovered to contain insecure protections for its UART console.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00429 Published 2022-05-25 No fix listed CWE-306

TI-2021-10081 CVE-2021-29280 · GHSA-qcq8-mgfx-4pfj

In TP-Link Wireless N Router WR840N an ARP poisoning attack can cause buffer overflow

LOW 30

In TP-Link Wireless N Router WR840N an ARP poisoning attack can cause buffer overflow

CVSS 3.1MEDIUM 6.4 Adjacent network Low privileges No interaction EPSS 0.00754 Published 2021-08-19 No fix listed CWE-668

TI-2019-09106 CVE-2019-12195 · GHSA-j3f3-xxfp-q982

TP-Link TL-WR840N v5 00000005 devices allow XSS via the network name.

LOW 26

TP-Link TL-WR840N v5 00000005 devices allow XSS via the network name.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.01756 Published 2019-05-24 No fix listed CWE-79

Open these records in search →