# cve.now: TP-Link

The newest entries naming TP-Link as an affected vendor (up to 200), of 114 in all, 1 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2018-25321](https://cve.now/CVE-2018-25321.md): TP-Link TL-WR720N CSRF via Administrative Interfaces (firmware V1\_130719) (CVSS 5.3)
- [CVE-2025-40634](https://cve.now/CVE-2025-40634.md): Stack-based buffer overflow in TP-Link Archer AX50 (CVSS 9.2)
- [CVE-2025-32107](https://cve.now/CVE-2025-32107.md): OS command injection vulnerability exists in Deco BE65 Pro firmware versions prior to "Deco BE65 Pro(JP)\_V1\_1.1.2 Build 20250123". (CVSS 8.0)
- [CVE-2025-3442](https://cve.now/CVE-2025-3442.md): Information Disclosure Vulnerability in TP-Link Tapo IoT Smart Hub (CVSS 4.4)
- [CVE-2025-1099](https://cve.now/CVE-2025-1099.md): Information Disclosure Vulnerability in TP-Link Tapo C500 Wi-Fi Camera (CVSS 7.0)
- [CVE-2025-0730](https://cve.now/CVE-2025-0730.md): TP-Link TL-SG108E HTTP GET Request usr\_account\_set.cgi get request method with sensitive query strings (CVSS 6.3)
- [CVE-2025-0729](https://cve.now/CVE-2025-0729.md): TP-Link TL-SG108E clickjacking (CVSS 6.9)
- [CVE-2024-12344](https://cve.now/CVE-2024-12344.md): TP-Link VN020 F3v(T) FTP USER Command memory corruption (CVSS 5.3)
- [CVE-2024-12343](https://cve.now/CVE-2024-12343.md): TP-Link VN020 F3v(T) SOAP Request WANIPConnection buffer overflow (CVSS 7.1)
- [CVE-2024-12342](https://cve.now/CVE-2024-12342.md): TP-Link VN020 F3v(T) Incomplete SOAP Request WANIPConnection denial of service (CVSS 7.1)
- [CVE-2024-54127](https://cve.now/CVE-2024-54127.md): Exposure of Wi-Fi Credentials in Plaintext in TP-Link Archer C50 (CVSS 4.3)
- [CVE-2024-54126](https://cve.now/CVE-2024-54126.md): Insufficient Integrity Verification Vulnerability in TP-Link Archer C50 (CVSS 8.5)
- [CVE-2024-11237](https://cve.now/CVE-2024-11237.md): TP-Link VN020 F3v(T) DHCP DISCOVER Packet Parser TP-Thumper stack-based overflow (CVSS 8.7)
- [CVE-2024-10523](https://cve.now/CVE-2024-10523.md): Information Disclosure Vulnerability in TP-Link IoT Smart Hub (CVSS 4.4)
- [CVE-2024-9284](https://cve.now/CVE-2024-9284.md): TP-LINK TL-WR841ND popupSiteSurveyRpm.htm stack-based overflow (CVSS 7.1)
- [CVE-2024-4224](https://cve.now/CVE-2024-4224.md): TP-Link TL-SG1016DE XSS (CVSS 5.4)
- [CVE-2024-38471](https://cve.now/CVE-2024-38471.md): Multiple TP-LINK products allow a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by restoring a (CVSS 6.8)
- [CVE-2024-21827](https://cve.now/CVE-2024-21827.md): A leftover debug code vulnerability exists in the cli\_server debug functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.4.1 Build 2024 (CVSS 7.2)
- [CVE-2024-5035](https://cve.now/CVE-2024-5035.md): TP-Link Archer C5400X - RFTest Unauthenticated Command Injection (CVSS 8.8)
- [CVE-2024-5244](https://cve.now/CVE-2024-5244.md): TP-Link Omada ER605 Reliance on Security Through Obscurity Vulnerability (CVSS 5.0)
- [CVE-2024-5243](https://cve.now/CVE-2024-5243.md): TP-Link Omada ER605 Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.5)
- [CVE-2024-5242](https://cve.now/CVE-2024-5242.md): TP-Link Omada ER605 Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.5)
- [CVE-2024-5228](https://cve.now/CVE-2024-5228.md): TP-Link Omada ER605 Comexe DDNS Response Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.5)
- [CVE-2024-5227](https://cve.now/CVE-2024-5227.md): TP-Link Omada ER605 PPTP VPN username Command Injection Remote Code Execution Vulnerability (CVSS 7.5)
- [CVE-2024-31340](https://cve.now/CVE-2024-31340.md): TP-Link Tether versions prior to 4.5.13 and TP-Link Tapo versions prior to 3.3.6 do not properly validate certificates, which may allow a re (CVSS 4.8)
- [CVE-2023-50225](https://cve.now/CVE-2023-50225.md): TP-Link TL-WR902AC dm\_fillObjByStr Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 6.8)
- [CVE-2023-50224](https://cve.now/CVE-2023-50224.md): TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability (CVSS 6.5, KEV)
- [CVE-2023-44448](https://cve.now/CVE-2023-44448.md): TP-Link Archer A54 libcmm.so dm\_fillObjByStr Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 6.8)
- [CVE-2023-44447](https://cve.now/CVE-2023-44447.md): TP-Link TL-WR902AC loginFs Improper Authentication Information Disclosure Vulnerability (CVSS 6.5)
- [CVE-2023-41184](https://cve.now/CVE-2023-41184.md): TP-Link Tapo C210 ActiveCells Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 6.8)
- [CVE-2023-39471](https://cve.now/CVE-2023-39471.md): TP-Link TL-WR841N ated\_tp Command Injection Remote Code Execution Vulnerability (CVSS 7.5)
- [CVE-2023-35717](https://cve.now/CVE-2023-35717.md): TP-Link Tapo C210 Password Recovery Authentication Bypass Vulnerability (CVSS 8.8)
- [CVE-2023-27359](https://cve.now/CVE-2023-27359.md): TP-Link AX1800 hotplugd Firewall Rule Race Condition Vulnerability (CVSS 9.8)
- [CVE-2023-27346](https://cve.now/CVE-2023-27346.md): TP-Link AX1800 Firmware Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2023-27333](https://cve.now/CVE-2023-27333.md): TP-Link Archer AX21 tmpServer Command 0x422 Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 6.8)
- [CVE-2023-27332](https://cve.now/CVE-2023-27332.md): TP-Link Archer AX21 tdpServer Logging Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2023-49074](https://cve.now/CVE-2023-49074.md): A denial of service vulnerability exists in the TDDP functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1. (CVSS 7.4)
- [CVE-2023-49134](https://cve.now/CVE-2023-49134.md): A command execution vulnerability exists in the tddpd enable\_test\_mode functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (CVSS 8.1)
- [CVE-2023-49133](https://cve.now/CVE-2023-49133.md): A command execution vulnerability exists in the tddpd enable\_test\_mode functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (CVSS 8.1)
- [CVE-2023-48724](https://cve.now/CVE-2023-48724.md): A memory corruption vulnerability exists in the web interface functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 (CVSS 7.5)
- [CVE-2023-49913](https://cve.now/CVE-2023-49913.md): A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gi (CVSS 7.2)
- [CVE-2023-49912](https://cve.now/CVE-2023-49912.md): A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gi (CVSS 7.2)
- [CVE-2023-49911](https://cve.now/CVE-2023-49911.md): A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gi (CVSS 7.2)
- [CVE-2023-49910](https://cve.now/CVE-2023-49910.md): A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gi (CVSS 7.2)
- [CVE-2023-49909](https://cve.now/CVE-2023-49909.md): A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gi (CVSS 7.2)
- [CVE-2023-49908](https://cve.now/CVE-2023-49908.md): A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gi (CVSS 7.2)
- [CVE-2023-49907](https://cve.now/CVE-2023-49907.md): A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gi (CVSS 7.2)
- [CVE-2023-49906](https://cve.now/CVE-2023-49906.md): A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gi (CVSS 7.2)
- [CVE-2024-1180](https://cve.now/CVE-2024-1180.md): TP-Link Omada ER605 Access Control Command Injection Remote Code Execution Vulnerability (CVSS 6.8)
- [CVE-2024-1179](https://cve.now/CVE-2024-1179.md): TP-Link Omada ER605 DHCPv6 Client Options Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.5)
- [CVE-2023-6437](https://cve.now/CVE-2023-6437.md): Authenticated RCE (CVSS 9.8)
- [CVE-2024-2188](https://cve.now/CVE-2024-2188.md): Cross-Site Scripting vulnerability in TP-Link Archer AX50 (CVSS 6.1)
- [CVE-2023-43482](https://cve.now/CVE-2023-43482.md): A command execution vulnerability exists in the guest resource functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 (CVSS 7.2)
- [CVE-2023-36498](https://cve.now/CVE-2023-36498.md): A post-authentication command injection vulnerability exists in the PPTP client functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3 (CVSS 7.2)
- [CVE-2023-47209](https://cve.now/CVE-2023-47209.md): A post authentication command injection vulnerability exists in the ipsec policy functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1. (CVSS 7.2)
- [CVE-2023-47167](https://cve.now/CVE-2023-47167.md): A post authentication command injection vulnerability exists in the GRE policy functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3. (CVSS 7.2)
- [CVE-2023-42664](https://cve.now/CVE-2023-42664.md): A post authentication command injection vulnerability exists when setting up the PPTP global configuration of Tp-Link ER7206 Omada Gigabit V (CVSS 7.2)
- [CVE-2023-46683](https://cve.now/CVE-2023-46683.md): A post authentication command injection vulnerability exists when configuring the wireguard VPN functionality of Tp-Link ER7206 Omada Gigab (CVSS 7.2)
- [CVE-2023-47617](https://cve.now/CVE-2023-47617.md): A post authentication command injection vulnerability exists when configuring the web group member of Tp-Link ER7206 Omada Gigabit VPN Route (CVSS 7.2)
- [CVE-2023-47618](https://cve.now/CVE-2023-47618.md): A post authentication command execution vulnerability exists in the web filtering functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1 (CVSS 7.2)
- [CVE-2024-21833](https://cve.now/CVE-2024-21833.md): Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product to execute arbitrary OS commands. (CVSS 8.8)
- [CVE-2024-21821](https://cve.now/CVE-2024-21821.md): Multiple TP-LINK products allow a network-adjacent authenticated attacker with access to the product from the LAN port or Wi-Fi to execute a (CVSS 8.0)
- [CVE-2024-21773](https://cve.now/CVE-2024-21773.md): Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product from the LAN port or Wi-Fi to execute (CVSS 8.8)
- [CVE-2023-36489](https://cve.now/CVE-2023-36489.md): Multiple TP-LINK products allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands. (no CVSS)
- [CVE-2023-31188](https://cve.now/CVE-2023-31188.md): Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. (CVSS 8.0)
- [CVE-2023-32619](https://cve.now/CVE-2023-32619.md): Archer C50 firmware versions prior to 'Archer C50(JP)\_V3\_230505' and Archer C55 firmware versions prior to 'Archer C55(JP)\_V1\_230506' use ha (CVSS 8.8)
- [CVE-2023-37284](https://cve.now/CVE-2023-37284.md): Improper authentication vulnerability in Archer C20 firmware versions prior to 'Archer C20(JP)\_V1\_230616' allows a network-adjacent unauthen (no CVSS)
- [CVE-2023-38563](https://cve.now/CVE-2023-38563.md): Archer C1200 firmware versions prior to 'Archer C1200(JP)\_V2\_230508' and Archer C9 firmware versions prior to 'Archer C9(JP)\_V3\_230508' allo (no CVSS)
- [CVE-2023-38568](https://cve.now/CVE-2023-38568.md): Archer A10 firmware versions prior to 'Archer A10(JP)\_V2\_230504' allows a network-adjacent unauthenticated attacker to execute arbitrary OS (no CVSS)
- [CVE-2023-38588](https://cve.now/CVE-2023-38588.md): Archer C3150 firmware versions prior to 'Archer C3150(JP)\_V2\_230511' allows a network-adjacent authenticated attacker to execute arbitrary O (CVSS 8.0)
- [CVE-2023-39224](https://cve.now/CVE-2023-39224.md): Archer C5 firmware all versions and Archer C7 firmware versions prior to 'Archer C7(JP)\_V2\_230602' allow a network-adjacent authenticated at (no CVSS)
- [CVE-2023-39935](https://cve.now/CVE-2023-39935.md): Archer C5400 firmware versions prior to 'Archer C5400(JP)\_V2\_230506' allows a network-adjacent authenticated attacker to execute arbitrary O (no CVSS)
- [CVE-2023-40193](https://cve.now/CVE-2023-40193.md): Deco M4 firmware versions prior to 'Deco M4(JP)\_V2\_1.5.8 Build 20230619' allows a network-adjacent authenticated attacker to execute arbitra (no CVSS)
- [CVE-2023-40357](https://cve.now/CVE-2023-40357.md): Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. (CVSS 8.0)
- [CVE-2023-40531](https://cve.now/CVE-2023-40531.md): Archer AX6000 firmware versions prior to 'Archer AX6000(JP)\_V1\_1.3.0 Build 20221208' allows a network-adjacent authenticated attacker to exe (no CVSS)
- [CVE-2023-2646](https://cve.now/CVE-2023-2646.md): TP-Link Archer C7v2 GET Request Parameter denial of service (CVSS 4.5)
- [CVE-2023-28368](https://cve.now/CVE-2023-28368.md): TP-Link L2 switch T2600G-28SQ firmware versions prior to 'T2600G-28SQ(UN)\_V1\_1.0.6 Build 20230227' uses vulnerable SSH host keys. (CVSS 5.7)
- [CVE-2022-43636](https://cve.now/CVE-2022-43636.md): This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of TP-Link TL-WR940N 6\_211111 3.20.1 (CVSS 7.5)
- [CVE-2022-43635](https://cve.now/CVE-2022-43635.md): This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR940N 6\_2111 (CVSS 6.5)
- [CVE-2022-42433](https://cve.now/CVE-2022-42433.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR841N TL-WR841N(US)\_ (CVSS 6.4)
- [CVE-2022-24973](https://cve.now/CVE-2022-24973.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 2 (CVSS 6.8)
- [CVE-2022-24972](https://cve.now/CVE-2022-24972.md): This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR940N 3.20.1 (CVSS 6.5)
- [CVE-2022-24353](https://cve.now/CVE-2022-24353.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1750 1.1.4 Build 20211 (CVSS 8.8)
- [CVE-2022-24352](https://cve.now/CVE-2022-24352.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1750 prior to 211210 r (CVSS 8.8)
- [CVE-2022-0650](https://cve.now/CVE-2022-0650.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 2 (CVSS 6.8)
- [CVE-2023-0936](https://cve.now/CVE-2023-0936.md): TP-Link Archer C50 Web Management Interface denial of service (CVSS 6.5)
- [CVE-2023-22303](https://cve.now/CVE-2023-22303.md): TP-Link SG105PE firmware prior to 'TL-SG105PE(UN) 1.0\_1.0.0 Build 20221208' contains an authentication bypass vulnerability. (CVSS 9.8)
- [CVE-2022-4498](https://cve.now/CVE-2022-4498.md): A vulnerable HTTP Basic Authentication process in TP-Link routers, Archer C5 and WR710N-V1, is susceptible to either a DoS or an arbitrary code execution via any interface. (CVSS 9.8)
- [CVE-2022-4499](https://cve.now/CVE-2022-4499.md): The strcmp function in TP-Link routers, Archer C5 and WR710N-V1, used for checking credentials in httpd, is susceptible to a side-channel attack. (CVSS 7.5)
- [CVE-2022-41783](https://cve.now/CVE-2022-41783.md): tdpServer of TP-Link RE300 V1 improperly processes its input, which may allow an attacker to cause a denial-of-service (DoS) condition of th (CVSS 5.5)
- [CVE-2022-4296](https://cve.now/CVE-2022-4296.md): TP-Link TL-WR740N ARP resource consumption (CVSS 6.5)
- [CVE-2021-4045](https://cve.now/CVE-2021-4045.md): TP-LINK Tapo C200 remote code execution vulnerability (CVSS 9.8)
- [CVE-2022-24355](https://cve.now/CVE-2022-24355.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 2 (CVSS 8.8)
- [CVE-2022-24354](https://cve.now/CVE-2022-24354.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1750 prior to 1.1.4 Bu (CVSS 8.8)
- [CVE-2022-0162](https://cve.now/CVE-2022-0162.md): Vulnerability in TP-LinK TL-WR841N wireless router (CVSS 8.4)
- [CVE-2021-35004](https://cve.now/CVE-2021-35004.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link TL-WA1201 1.0.1 Build 20200709 rel (CVSS 8.8)
- [CVE-2021-35003](https://cve.now/CVE-2021-35003.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer C90 1.0.6 Build 20200114 re (CVSS 9.8)
- [CVE-2021-4144](https://cve.now/CVE-2021-4144.md): TP-Link wifi router TL-WR802N V4(JP), with firmware version prior to 211202, is vulnerable to OS command injection. (no CVSS)
- [CVE-2021-27246](https://cve.now/CVE-2021-27246.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 AC1750 1.0.15 (CVSS 8.0)
- [CVE-2021-27245](https://cve.now/CVE-2021-27245.md): This vulnerability allows a firewall bypass on affected installations of TP-Link Archer A7 prior to Archer C7(US)\_V5\_210125 and Archer A7(US (CVSS 8.1)
- [CVE-2020-10916](https://cve.now/CVE-2020-10916.md): This vulnerability allows network-adjacent attackers to escalate privileges on affected installations of TP-Link TL-WA855RE Firmware Ver: 85 (CVSS 8.0)
- [CVE-2020-10888](https://cve.now/CVE-2020-10888.md): This vulnerability allows remote attackers to bypass authentication on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC17 (CVSS 5.9)
- [CVE-2020-10887](https://cve.now/CVE-2020-10887.md): This vulnerability allows a firewall bypass on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. (CVSS 8.1)
- [CVE-2020-10886](https://cve.now/CVE-2020-10886.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1 (CVSS 8.1)
- [CVE-2020-10885](https://cve.now/CVE-2020-10885.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1 (CVSS 8.1)
- [CVE-2020-10884](https://cve.now/CVE-2020-10884.md): This vulnerability allows network-adjacent attackers execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190 (CVSS 8.1)
- [CVE-2020-10883](https://cve.now/CVE-2020-10883.md): This vulnerability allows local attackers to escalate privileges on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 (CVSS 5.3)
- [CVE-2020-10882](https://cve.now/CVE-2020-10882.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: (CVSS 8.8)
- [CVE-2020-10881](https://cve.now/CVE-2020-10881.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1 (CVSS 9.8)
- [CVE-2019-17147](https://cve.now/CVE-2019-17147.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-LINK TL-WR841N routers. (CVSS 8.8)
- [CVE-2018-15702](https://cve.now/CVE-2018-15702.md): The web interface in TP-Link TL-WRN841N 0.9.1 4.16 v0348.0 is vulnerable to CSRF due to insufficient validation of the referer field. (no CVSS)
- [CVE-2018-15701](https://cve.now/CVE-2018-15701.md): The web interface in TP-Link TL-WRN841N 0.9.1 4.16 v0348.0 is vulnerable to a denial of service when an unauthenticated LAN user sends a cra (no CVSS)
- [CVE-2018-15700](https://cve.now/CVE-2018-15700.md): The web interface in TP-Link TL-WRN841N 0.9.1 4.16 v0348.0 is vulnerable to a denial of service when an unauthenticated LAN user sends a cra (no CVSS)
- [CVE-2018-5393](https://cve.now/CVE-2018-5393.md): TP-Link EAP Controller versions 2.5.3 and earlier lack RMI authentication (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/tp-link
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.