Tp-link

Tl-wr902ac Firmware

5 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.8

CVE-2023-50225

  • EPSS 0.87%
  • Published 03.05.2024 03:16:10
  • Last modified 07.08.2025 15:57:29

TP-Link TL-WR902AC dm_fillObjByStr Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR902AC routers. Authentication...

6.5

CVE-2023-44447

  • EPSS 0.13%
  • Published 03.05.2024 03:16:00
  • Last modified 04.09.2025 16:32:26

TP-Link TL-WR902AC loginFs Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR902AC routers. Authentication is...

8.8

CVE-2023-36489

  • EPSS 0.14%
  • Published 06.09.2023 10:15:13
  • Last modified 21.11.2024 08:09:49

Multiple TP-LINK products allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: TL-WR802N firmware versions prior to 'TL-WR802N(JP)_V4_221008', TL-WR841N firmware versions prior...

8.8

CVE-2022-48194

Exploit
  • EPSS 64.59%
  • Published 30.12.2022 07:15:07
  • Last modified 10.04.2025 19:15:50

TP-Link TL-WR902AC devices through V3 0.9.1 allow remote authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS) by uploading a crafted firmware update because the signature check is inadequate.

10

CVE-2022-25074

Exploit
  • EPSS 3.35%
  • Published 24.02.2022 15:15:30
  • Last modified 21.11.2024 06:51:36

TP-Link TL-WR902AC(US)_V3_191209 routers were discovered to contain a stack overflow in the function DM_ Fillobjbystr(). This vulnerability allows unauthenticated attackers to execute arbitrary code.