Tl-mr3020 Firmware vulnerabilities

2 known vulnerabilities in Tl-mr3020 Firmware from TP-Link. 1 is rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 6.5 Medium severity

  TP-Link TL-WR841N Authentication Bypass by Spoofing Exploited

  CVE-2023-50224May 3, 2024TP-LinkEPSS 20%

  TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not req

• 9.8 Critical severity

  Tl-mr3020 Firmware: Improper Neutralization of Special Elements used in a Command

  CVE-2023-27078Mar 23, 2023TP-LinkEPSS 2.49%

  A command injection issue was found in TP-Link MR3020 v.1_150921 that allows a remote attacker to execute arbitrary commands via a crafted request to the tftp endpoint.