Priority CRITICAL 97KEV
TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerability via the component /userRpm/WlanNetworkRpm .
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.41606 · Published 2023-06-07 · No fix listed CWE-77
Priority CRITICAL 96KEV
The authenticated remote command execution (RCE) vulnerability exists in the Parental Control page on TP-Link Archer C7(EU) V2 and TL-WR841N/ND(MS) V9.
CVSS 4.0HIGH 8.6· Network · High privileges · No interaction · EPSS 0.413 · Published 2025-08-29 · Fixed in 241108 CWE-78
Priority CRITICAL 90KEV
Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316, Archer C9 (1.0), TL-WDR3500 (1.0), TL-WDR3600 (1.0…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.83948 · Published 2015-04-17 · No fix listed CWE-22
Priority CRITICAL 86KEV
TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability.
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.20021 · Published 2024-05-03 · Fixed in V11_211209, V12_230317 +4 CWE-290
Priority HIGH 79
An issue was discovered on TP-Link TL-WR840N v5 00000005 0.9.1 3.16 v0001.0 Build 170608 Rel.58696n and TL-WR841N v13 00000013 0.9.1 4.16 v0001.0 Build 170622 Rel.64334n devices.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.67061 · Published 2018-06-04 · No fix listed CWE-384
Priority HIGH 72
A command injection vulnerability was identified in TP-Link TL-WR802N v4, TL-WR841N v14, and TL-WR840N v6 due to improper neutralization of special elements used in an OS command.
CVSS 4.0HIGH 8.5· Adjacent network · High privileges · No interaction · EPSS 0.03033 · Published 2026-03-13 · Fixed in V4_260304, V14_260303 +1 CWE-78
Priority HIGH 71
Directory traversal vulnerability in the web-based management feature on the TP-LINK TL-WR841N router with firmware 3.13.9 build 120201 Rel.54965n and earlier allows remote attackers to read arbitrary files via a ..
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.68716 · Published 2012-11-01 · No fix listed CWE-22
Priority HIGH 66
A Command Injection issue in the traceroute feature on TP-Link TL-WR841N V13 (JP) with firmware versions prior to 201216 allows authenticated users to execute arbitrary code as root via shell metacharacters, a different…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.42285 · Published 2021-01-25 · No fix listed CWE-78
Priority MEDIUM 60
TP-Link TL-WR841N 8.0 4.17.16 Build 120201 Rel.54750n is vulnerable to Cross Site Scripting (XSS).
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00581 · Published 2022-10-18 · No fix listed CWE-79
Priority MEDIUM 57
TL-WR841Nv14_US_0.9.1_4.18 routers were discovered to contain a stack overflow in the function dm_fillObjByStr().
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.13034 · Published 2022-02-22 · No fix listed CWE-787
Priority MEDIUM 53
This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-LINK TL-WR841N routers.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.13651 · Published 2020-01-07 · No fix listed CWE-120
Priority MEDIUM 48
An issue in the firmware update process of TP-Link TL-WR841N / TL-WA841ND V7 3.13.9 and earlier allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01046 · Published 2022-12-20 · No fix listed
Priority MEDIUM 47
On TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 171019 Rel.55346n devices, all actions in the web interface are affected by bypass of authentication via an HTTP request.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02815 · Published 2018-07-02 · No fix listed CWE-287
Priority MEDIUM 43
The vulnerability exists in TP-Link TL-WR841N V11 3.16.9 Build 160325 Rel.62500n wireless router due to transmission of authentication information in cleartextbase64 format.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0067 · Published 2022-02-09 · No fix listed CWE-319
Priority MEDIUM 43
A buffer overflow in the httpd daemon on TP-Link TL-WR841N V10 (firmware version 3.16.9) devices allows an authenticated remote attacker to execute arbitrary code via a GET request to the page for the configuration of th…
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.09345 · Published 2020-04-02 · No fix listed CWE-120
Priority MEDIUM 43
The Ping and Traceroute features on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow authenticated blind Command Injection.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02636 · Published 2018-07-02 · No fix listed CWE-78
Priority MEDIUM 42
TP-Link TL-WR841N ated_tp Command Injection Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00913 · Published 2024-05-03 · No fix listed CWE-78
Priority MEDIUM 42
A buffer overflow in the httpd daemon on TP-Link TL-WR841N V12 (firmware version 3.16.9) devices allows an authenticated remote attacker to execute arbitrary code via a GET request to the page for the System Tools of the…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02039 · Published 2022-07-14 · No fix listed CWE-120
Priority MEDIUM 41
Multiple TP-LINK products allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00557 · Published 2023-09-06 · No fix listed CWE-78
Priority MEDIUM 40
TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR940N V2/V3 and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component /userRpm/QoSRuleListRpm.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00815 · Published 2023-06-22 · No fix listed CWE-120
Priority MEDIUM 40
TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR740N V1/V2, TL-WR940N V2/V3, and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component /userRpm/AccessCtrlTimeSchedRpm.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00815 · Published 2023-06-22 · No fix listed CWE-120
Priority LOW 39
TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a buffer overflow via the component /userRpm/FixMapCfgRpm.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00903 · Published 2023-06-07 · No fix listed CWE-125
Priority LOW 39
TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a buffer overflow via the component /userRpm/WlanMacFilterRpm.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00903 · Published 2023-06-07 · No fix listed CWE-125
Priority LOW 38
CSRF exists for all actions in the web interface on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.00458 · Published 2018-07-02 · No fix listed CWE-352
Priority LOW 36
A vulnerability has been found in TP-Link TL-WR841N V11.
CVSS 4.0MEDIUM 6.9· Network · High privileges · No interaction · EPSS 0.00363 · Published 2025-07-29 · No fix listed CWE-119
Load more