TP-Link TL-WR840N
Approved changes feed: RSS · Atom
cpe:2.3:h:tp-link:tl-wr840n:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Tp Link (0b2e1553-ac8b-5981-a60b-ca6c27ee3a6e) |
|---|---|
| Product | Tl Wr840N (169c607d-9130-50fe-84b2-650f0bc5e5e0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-39471 |
vulnerable | 2026-06-08 06:09:37.553420 |
TP-Link TL-WR841N ated_tp Command Injection Remote Code Execution Vulnerability
HIGH (7.5)
TP-Link TL-WR841N ated_tp Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the ated_tp service. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-21825.
Published: 2024-05-03T02:10:38.498Z
Updated: 2024-08-02T18:10:20.683Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25064 |
not_vulnerable | 2026-06-08 05:41:45.138285 |
Details available
TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a remote code execution (RCE) vulnerability via the function oal_wan6_setIpAddr.
Published: 2022-02-25T19:38:59.000Z
Updated: 2026-07-09T00:17:31.762Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25062 |
not_vulnerable | 2026-06-08 05:41:45.137741 |
Details available
TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain an integer overflow via the function dm_checkString. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.
Published: 2022-02-25T19:38:58.000Z
Updated: 2026-07-09T00:17:30.528Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25061 |
not_vulnerable | 2026-06-08 05:41:45.137101 |
Details available
TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_setIp6DefaultRoute.
Published: 2022-02-25T19:39:02.000Z
Updated: 2026-07-09T00:17:29.300Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25060 |
not_vulnerable | 2026-06-08 05:41:45.136289 |
Details available
TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_startPing.
Published: 2022-02-25T19:38:56.000Z
Updated: 2026-07-09T00:17:28.063Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29280 |
not_vulnerable | 2026-06-08 05:31:26.090686 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-36178 |
not_vulnerable | 2026-06-08 05:25:02.543083 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15060 |
not_vulnerable | 2026-06-08 05:12:56.607890 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-15840 |
not_vulnerable | 2026-06-08 05:11:03.655387 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-15172 |
not_vulnerable | 2026-06-08 05:10:53.862863 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.