GCVE - cpe:2.3:h:tp-link:tl-wr840n:5.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:tp-link:tl-wr840n:5.0:*:*:*:*:*:*:*

part: h version: 5.0 update: *

Vendor	Tp Link (`0b2e1553-ac8b-5981-a60b-ca6c27ee3a6e`)
Product	Tl Wr840N (`169c607d-9130-50fe-84b2-650f0bc5e5e0`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-29402`	not_vulnerable	2026-06-08 05:42:47.673436	Details available MEDIUM (6.8) TP-Link TL-WR840N EU v6.20 was discovered to contain insecure protections for its UART console. This vulnerability allows attackers to connect to the UART port via a serial connection and execute commands as the root user without authentication. Published: 2022-05-25T17:24:29.000Z Updated: 2024-08-03T06:17:55.229Z Open on db.gcve.eu Reference links https://k4m1ll0.com/cve-tplink-tlwr840N-uart-shell.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-12195`	not_vulnerable	2026-06-08 05:12:38.680760	Details available TP-Link TL-WR840N v5 00000005 devices allow XSS via the network name. The attacker must log into the router by breaking the password and going to the admin login page by THC-HYDRA to get the network name. With an XSS payload, the network name changed automatically and the internet connection was disconnected. All the users become disconnected from the internet. Published: 2019-05-24T15:24:45.000Z Updated: 2024-08-04T23:10:30.807Z Open on db.gcve.eu Reference links https://www.tp-link.com/us/security http://packetstormsecurity.com/files/153027/TP-LINK-TL-WR840N-Cross-Site-Scripting.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-11714`	not_vulnerable	2026-06-08 05:10:38.848144	Details available An issue was discovered on TP-Link TL-WR840N v5 00000005 0.9.1 3.16 v0001.0 Build 170608 Rel.58696n and TL-WR841N v13 00000013 0.9.1 4.16 v0001.0 Build 170622 Rel.64334n devices. This issue is caused by improper session handling on the /cgi/ folder or a /cgi file. If an attacker sends a header of "Referer: http://192.168.0.1/mainFrame.htm" then no authentication is required for any action. Published: 2018-06-04T14:00:00.000Z Updated: 2024-09-16T23:25:29.762Z Open on db.gcve.eu Reference links http://blog.securelayer7.net/time-to-disable-tp-link-home-wifi-router/ https://www.exploit-db.com/exploits/44781/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.