[ Vendor · 10 CVEs ]
TP-Link
CVEs affecting TP-Link published in the last 30 days, plus any TP-Link CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2025-9377 | 29 Aug 2025 | CVSS 7.2 | TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command InjectionThe authenticated remote command execution (RCE) vulnerability exists in the Parental Control page on TP-Link Archer C7(EU) V2 and TL-WR841N/ND(MS)… | Exploited |
| CVE-2023-50224 | 3 May 2024 | CVSS 6.5 | TP-Link TL-WR841N Authentication Bypass by SpoofingTP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to… | Exploited |
| CVE-2023-50224 | 3 May 2024 | CVSS 6.5 | TP-Link TL-WR841N Authentication Bypass by SpoofingTP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to… | Exploited |
| CVE-2023-33538 | 7 Jun 2023 | CVSS 8.8 | TP-Link Multiple Routers Command InjectionTP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerability via the component… | Exploited |
| CVE-2023-33538 | 7 Jun 2023 | CVSS 8.8 | TP-Link Multiple Routers Command InjectionTP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerability via the component… | Exploited |
| CVE-2023-1389 | 15 Mar 2023 | CVSS 8.8 | TP-Link Archer AX-21 Command InjectionTP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability in the country form of the… | Exploited |
| CVE-2020-24363 | 31 Aug 2020 | CVSS 8.8 | TP-link TL-WA855RE Missing Authentication for Critical FunctionTP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request for a… | Exploited |
| CVE-2020-24363 | 31 Aug 2020 | CVSS 8.8 | TP-link TL-WA855RE Missing Authentication for Critical FunctionTP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request for a… | Exploited |
| CVE-2015-3035 | 22 Apr 2015 | CVSS 7.5 | TP-Link Multiple Archer Devices Directory TraversalDirectory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with… | Exploited |
| CVE-2015-3035 | 22 Apr 2015 | CVSS 7.5 | TP-Link Multiple Archer Devices Directory TraversalDirectory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with… | Exploited |