Vulnerabilidades en TP-Link

112 resultados
Análisis Vexday

Com 74 CVEs catalogadas, os dispositivos TP-Link apresentam uma taxa de exploração ativa 3,0× acima da média geral do catálogo CISA KEV, sinal de que vulnerabilidades nessa plataforma atraem atenção real de agentes de ameaça, não apenas pesquisadores. O tipo de falha mais frequente é CWE-121 (stack-based buffer overflow), classe de vulnerabilidade que historicamente permite execução remota de código e eleva o risco em equipamentos de borda de rede. Entre as 8 CVEs críticas e 7 com prova de conceito pública, destaca-se CVE-2023-50224, atualmente confirmada em exploração ativa e com EPSS de 0,1745, enquanto o maior EPSS observado no portfólio chega a 0,7284 — indicando que ao menos uma falha é considerada de alta probabilidade de exploração iminente. Equipes de segurança que operam dispositivos TP-Link devem priorizar a aplicação de patches nas CVEs críticas com PoC disponível e monitorar continuamente o status KEV dado o histórico de exploração acima da média.

CVE-2022-24354HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1750 prior to 1.1.4 BuEPSS 1.8%CVE-2022-4498CRITICALA vulnerable HTTP Basic Authentication process in TP-Link routers, Archer C5 and WR710N-V1, is susceptible to either a DoS or an arbitrary code execution via any interface.EPSS 1.8%CVE-2023-49134HIGHA command execution vulnerability exists in the tddpd enable_test_mode functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access PointEPSS 1.7%CVE-2023-49133HIGHA command execution vulnerability exists in the tddpd enable_test_mode functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access PointEPSS 1.7%CVE-2023-48724HIGHA memory corruption vulnerability exists in the web interface functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 EPSS 1.5%CVE-2023-6437CRITICALAuthenticated RCEEPSS 1.4%CVE-2023-27359CRITICALTP-Link AX1800 hotplugd Firewall Rule Race Condition VulnerabilityEPSS 1.2%CVE-2020-10916HIGHThis vulnerability allows network-adjacent attackers to escalate privileges on affected installations of TP-Link TL-WA855RE Firmware Ver: 85EPSS 1.1%CVE-2024-21833HIGHMultiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product to execute arbitrary OS commands. TheEPSS 1.1%CVE-2024-2188MEDIUMCross-Site Scripting vulnerability in TP-Link Archer AX50EPSS 1.0%CVE-2024-9284HIGHTP-LINK TL-WR841ND popupSiteSurveyRpm.htm stack-based overflowEPSS 1.0%CVE-2024-1180MEDIUMTP-Link Omada ER605 Access Control Command Injection Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-22303CRITICALTP-Link SG105PE firmware prior to 'TL-SG105PE(UN) 1.0_1.0.0 Build 20221208' contains an authentication bypass vulnerability. Under the certaEPSS 0.9%CVE-2023-0936MEDIUMTP-Link Archer C50 Web Management Interface denial of serviceEPSS 0.9%CVE-2023-39471HIGHTP-Link TL-WR841N ated_tp Command Injection Remote Code Execution VulnerabilityEPSS 0.9%CVE-2024-1179HIGHTP-Link Omada ER605 DHCPv6 Client Options Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.9%CVE-2022-43636HIGHThis vulnerability allows network-adjacent attackers to bypass authentication on affected installations of TP-Link TL-WR940N 6_211111 3.20.1EPSS 0.9%CVE-2024-21827HIGHA leftover debug code vulnerability exists in the cli_server debug functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.4.1 Build 2024EPSS 0.9%CVE-2024-5243HIGHTP-Link Omada ER605 Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2024-5242HIGHTP-Link Omada ER605 Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%