Vendor/product archive

tp-link / tl-wpa4220_firmware CVEs

Beta · best-effort

4 CVEs tagged to tp-link / tl-wpa4220_firmware — 0 Critical, 2 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to tp-link vendor archive

CVE-2021-28858

Published Jun 15, 2021

TP-Link's TL-WPA4220 4.0.2 Build 20180308 Rel.37064 does not use SSL by default. Attacker on the local network can monitor traffic and capture the cookie and other sensitive infor…

CVSS 5.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2021-28857

Published Jun 15, 2021

TP-Link's TL-WPA4220 4.0.2 Build 20180308 Rel.37064 username and password are sent via the cookie.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2020-28005

Published Nov 18, 2020

httpd on TP-Link TL-WPA4220 devices (hardware versions 2 through 4) allows remote authenticated users to trigger a buffer overflow (causing a denial of service) by sending a POST…

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2020-24297

Published Nov 18, 2020

httpd on TP-Link TL-WPA4220 devices (versions 2 through 4) allows remote authenticated users to execute arbitrary OS commands by sending crafted POST requests to the endpoint /adm…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1