Tl-wr902ac Firmware vulnerabilities
4 known vulnerabilities in Tl-wr902ac Firmware from TP-Link. 3 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 6.5 Medium severity
TP-Link TL-WR841N Authentication Bypass by Spoofing Exploited
TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not req
- 8.8 High severity
TL-WR802N: Improper Neutralization of Special Elements used in an OS Command
Multiple TP-LINK products allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: TL-WR802N firmware versions prior to 'TL-WR802N(JP)_V4_221008', TL-WR841N firmware versions prior to 'TL-WR
- 8.8 High severity
Tl-wr902ac Firmware: Unrestricted Upload of File with Dangerous Type
TP-Link TL-WR902AC devices through V3 0.9.1 allow remote authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS) by uploading a crafted firmware update because the signature check is inadequate.
- 9.8 Critical severity
Tl-wr902ac Firmware: Out-of-bounds Write
TP-Link TL-WR902AC(US)_V3_191209 routers were discovered to contain a stack overflow in the function DM_ Fillobjbystr(). This vulnerability allows unauthenticated attackers to execute arbitrary code.