wr940n_firmware vulnerabilities and exploits

(subscribe to this query)

8.8

CVSSv3

Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated users to execute arbitrary code via the (1) ping_addr parameter to PingIframeRpm.htm or (2) dnsserver2 parameter to WanStaticIpV6CfgRpm.htm.

Tp-link Wr940n Firmware -

1 EDB exploit1 Github repository1 Article

8

CVSSv3

This vulnerability allows network-adjacent malicious users to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n (5553) routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the httpd s...

Tp-link Tl-wr940n Firmware

9.9

CVSSv3

TP-Link TL-WR940N V4 exists to contain a buffer overflow via the ipStart parameter at /userRpm/WanDynamicIpV6CfgRpm. This vulnerability allows malicious users to cause a Denial of Service (DoS) via a crafted GET request.

Tp-link Tl-wr940n Firmware -

8.8

CVSSv3

This vulnerability allows network-adjacent malicious users to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n (5553) routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the par...

Tp-link Tl-wr940n Firmware

6.5

CVSSv3

This vulnerability allows network-adjacent malicious users to disclose sensitive information on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n (5553) routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within...

Tp-link Tl-wr940n Firmware 3.20.1

8

CVSSv3

This vulnerability allows network-adjacent malicious users to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n (5553) routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the httpd s...

Tp-link Tl-wr940n Firmware 3.20.1

7.5

CVSSv3

TP-Link router TL-WR940N V6 3.19.1 Build 180119 uses a deprecated MD5 algorithm to hash the admin password used for basic authentication.

Tp-link Tl-wr940n Firmware 6 3.19.1

6.5

CVSSv3

This vulnerability allows network-adjacent malicious users to disclose sensitive information on affected installations of TP-Link TL-WR940N 6_211111 3.20.1(US) routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service...

Tp-link Tl-wr940n Firmware 6 211111 3.20.1

8.8

CVSSv3

This vulnerability allows network-adjacent malicious users to bypass authentication on affected installations of TP-Link TL-WR940N 6_211111 3.20.1(US) routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which l...

Tp-link Tl-wr940n Firmware 6 211111 3.20.1

8.8

CVSSv3

TP-Link TL-WR940N is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the ipAddrDispose function. By sending specially crafted ICMP echo request packets, a remote authenticated attacker could overflow a buffer and execute arbitrary code on the sy...

Tp-link Tl-wr940n Firmware -Tp-link Tl-wr941nd Firmware -

1 EDB exploit

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook