Vulnerabilities

Summary — last 7 days

New vulnerabilities2,751▼ 38 vs. last week
Critical / high1,262▼ 270 vs. last week
New active exploitation (KEV)6▼ 1 vs. last week
Unscored (no CVSS)246▲ 209 vs. last week
–

3 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
ModifiedCritical (9.8)8.7%—Tp-link Tl-wr940n V2 FirmwareTp-link Tl-wr941nd V5 FirmwareTp-link Tl-wr841n V8 Firmware8/21/20236/17/2026
TP-Link WR841N V8, TP-Link TL-WR940N V2, and TL-WR941ND V5 were discovered to contain a buffer overflow via the radiusSecret parameter at /userRpm/WlanSecurityRpm.
ModifiedHigh (7.5)0.74%—Tp-link Tl-wr940n V2 FirmwareTp-link Tl-wr941nd V5 FirmwareTp-link Tl-wr841n V8 Firmware8/21/20236/17/2026
TP-Link TL-WR940N V2, TP-Link TL-WR941ND V5 and TP-Link TL-WR841N V8 were discovered to contain a buffer overflow via the component /userRpm/AccessCtrlAccessRulesRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request.
ModifiedCritical (9.8)0.49%—Tp-link Wr841n V8 Firmware6/26/20176/17/2026
The executable httpd on the TP-Link WR841N V8 router before TL-WR841N(UN)_V8_170210 contained a design flaw in the use of DES for block encryption. This resulted in incorrect access control, which allowed attackers to gain read-write access to system settings through the protected router configuration service tddp via…
Orbitaley — Vulnerabilities