Read the docs

TP-Link

Records637All Threatist records
Exploited (KEV)6In CISA KEV
CVSS critical100CVSS 9.0–10.0
CVSS high356CVSS 7.0–8.9

Exploited now

TP-Link records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

39 records in Tl-wr841n Firmware · all components

Priority CRITICAL 96KEV

The authenticated remote command execution (RCE) vulnerability exists in the Parental Control page on TP-Link Archer C7(EU) V2 and TL-WR841N/ND(MS) V9.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.413 Published 2025-08-29 Fixed in 241108 CWE-78
Priority CRITICAL 90KEV

Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316, Archer C9 (1.0), TL-WDR3500 (1.0), TL-WDR3600 (1.0…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.83948 Published 2015-04-17 No fix listed CWE-22
Priority CRITICAL 86KEV

TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.20021 Published 2024-05-03 Fixed in V11_211209, V12_230317 +4 CWE-290
Priority HIGH 72

A command injection vulnerability was identified in TP-Link TL-WR802N v4, TL-WR841N v14, and TL-WR840N v6 due to improper neutralization of special elements used in an OS command.

CVSS 4.0HIGH 8.5 Adjacent network High privileges No interaction EPSS 0.03033 Published 2026-03-13 Fixed in V4_260304, V14_260303 +1 CWE-78
Priority HIGH 66

A Command Injection issue in the traceroute feature on TP-Link TL-WR841N V13 (JP) with firmware versions prior to 201216 allows authenticated users to execute arbitrary code as root via shell metacharacters, a different…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.42285 Published 2021-01-25 No fix listed CWE-78
TI-2019-12798 CVE-2019-17147 · GHSA-9chw-9f2x-67h9

Buffer overflow in TP-Link TL-WR841N

Priority MEDIUM 53

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-LINK TL-WR841N routers.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.13651 Published 2020-01-07 No fix listed CWE-120
Priority MEDIUM 43

The vulnerability exists in TP-Link TL-WR841N V11 3.16.9 Build 160325 Rel.62500n wireless router due to transmission of authentication information in cleartextbase64 format.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0067 Published 2022-02-09 No fix listed CWE-319
Priority MEDIUM 43

A buffer overflow in the httpd daemon on TP-Link TL-WR841N V10 (firmware version 3.16.9) devices allows an authenticated remote attacker to execute arbitrary code via a GET request to the page for the configuration of th…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.09345 Published 2020-04-02 No fix listed CWE-120
TI-2023-20603 CVE-2023-39471 · GHSA-ff5w-vxjm-5vxf

OS command injection in TP-Link TL-WR841N

Priority MEDIUM 42

TP-Link TL-WR841N ated_tp Command Injection Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00913 Published 2024-05-03 No fix listed CWE-78
Priority MEDIUM 42

A buffer overflow in the httpd daemon on TP-Link TL-WR841N V12 (firmware version 3.16.9) devices allows an authenticated remote attacker to execute arbitrary code via a GET request to the page for the System Tools of the…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02039 Published 2022-07-14 No fix listed CWE-120
TI-2023-18330 CVE-2023-36489 · GHSA-qcp8-w359-4v36

OS command injection in TP-Link TL-WR802N

Priority MEDIUM 41

Multiple TP-LINK products allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00557 Published 2023-09-06 No fix listed CWE-78
Load more
Open these records in search →