Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2021-28858

TP-Link's TL-WPA4220 4.0.2 Build 20180308 Rel.37064 does not use SSL by default. Attacker on the local network can monitor traffic and capture the cookie and other sensitive information.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Tp-link
Products
Tl-wpa4220 Tl-wpa4220 Firmware
CVE-2020-28005

httpd on TP-Link TL-WPA4220 devices (hardware versions 2 through 4) allows remote authenticated users to trigger a buffer overflow (causing a denial of service) by sending a POST request to the /admin/syslog endpoint. Fixed version: TL-WPA4220(EU)_V4_201023

CVSS 3.1 · 6.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Tp-link
Products
Tl-wpa4220 Tl-wpa4220 Firmware
CVE-2020-24297

httpd on TP-Link TL-WPA4220 devices (versions 2 through 4) allows remote authenticated users to execute arbitrary OS commands by sending crafted POST requests to the endpoint /admin/powerline. Fixed version: TL-WPA4220(EU)_V4_201023

CVSS 3.1 · 8.8 High EPSS 3.7% KEV · Not listed
Vendors
Tp-link
Products
Tl-wpa4220 Tl-wpa4220 Firmware