GCVE - cpe:2.3:o:tp-link:tl-wdr4300_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:tp-link:tl-wdr4300_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Tp Link (`0b2e1553-ac8b-5981-a60b-ca6c27ee3a6e`)
Product	Tl Wdr4300 Firmware (`a03fff3d-3003-5928-8d25-8986e9b5201d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-6487`	vulnerable	2026-06-08 05:14:11.697112	Details available TP-Link WDR Series devices through firmware v3 (such as TL-WDR5620 V3.0) are affected by command injection (after login) leading to remote code execution, because shell metacharacters can be included in the weather get_weather_observe citycode field. Published: 2019-01-18T10:00:00.000Z Updated: 2024-09-17T03:22:42.398Z Open on db.gcve.eu Reference links https://github.com/0xcc-Since2016/TP-Link-WDR-Router-Command-injection_POC/blob/master/poc.py	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-3035`	vulnerable	2026-06-08 05:06:36.668453	Details available Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316, Archer C9 (1.0), TL-WDR3500 (1.0), TL-WDR3600 (1.0), and TL-WDR4300 (1.0) with firmware before 150302, TL-WR740N (5.0) and TL-WR741ND (5.0) with firmware before 150312, and TL-WR841N (9.0), TL-WR841N (10.0), TL-WR841ND (9.0), and TL-WR841ND (10.0) with firmware before 150310 allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/. Published: 2015-04-17T18:00:00.000Z Updated: 2025-10-21T23:56:02.932Z Open on db.gcve.eu Reference links http://www.tp-link.com/en/download/Archer-C9_V1.html#Firmware http://www.tp-link.com/en/download/Archer-C7_V2.html#Firmware http://www.tp-link.com/en/download/TL-WR740N_V5.html#Firmware http://www.tp-link.com/en/download/Archer-C5_V1.20.html#Firmware http://packetstormsecurity.com/files/131378/TP-LINK-Local-File-Disclosure.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-4728`	vulnerable	2026-06-08 05:05:45.634714	Details available The web server in the TP-LINK N750 Wireless Dual Band Gigabit Router (TL-WDR4300) with firmware before 140916 allows remote attackers to cause a denial of service (crash) via a long header in a GET request. Published: 2014-09-30T16:00:00.000Z Updated: 2024-08-06T11:27:36.248Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/96140 http://www.securityfocus.com/archive/1/533501/100/0/threaded http://seclists.org/fulldisclosure/2014/Sep/80 http://www.securityfocus.com/bid/70037 http://www.securityfocus.com/archive/1/533499/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-4727`	vulnerable	2026-06-08 05:05:45.633178	Details available Cross-site scripting (XSS) vulnerability in the DHCP clients page in the TP-LINK N750 Wireless Dual Band Gigabit Router (TL-WDR4300) with firmware before 140916 allows remote attackers to inject arbitrary web script or HTML via the hostname in a DHCP request. Published: 2014-09-30T16:00:00.000Z Updated: 2024-08-06T11:27:36.100Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/96139 http://www.securityfocus.com/archive/1/533501/100/0/threaded http://www.securityfocus.com/archive/1/533499/100/0/threaded http://seclists.org/fulldisclosure/2014/Sep/80 http://www.securityfocus.com/bid/70037	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.