Tl Wr940N V6
Approved changes feed: RSS · Atom
cpe:2.3:a:tp-link_systems_inc.:tl-wr940n_v6:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Tp Link Systems Inc. (48bb0273-54d9-5a12-8b5a-2521b7aba122) |
|---|---|
| Product | Tl Wr940N V6 (a6545806-c1bd-5636-87d9-59e2618e160f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-12935 |
vulnerable | 2026-09-16 04:32:51.234014 |
Unauthenticated Remote Code Execution in TP-Link TL-WR940N RTSP Conntrack Feature
The
TL-WR940N v6 router contains a vulnerability in its RTSP connection tracking
module that can lead to a stack-based buffer overflow. The issue occurs when a
LAN client initiates a connection to a malicious RTSP server controlled by an
attacker. A specially crafted RTSP message may trigger improper memory handling
within the kernel module
Successful
exploitation of this vulnerability may result in a denial-of-service (DoS)
condition or allow remote code execution (RCE), potentially leading to full
compromise of the device. This vulnerability can be exploited by an
unauthenticated attacker under the device's default configuration.
Published: 2026-07-29T18:20:06.417Z
Updated: 2026-07-30T03:55:40.565Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-11410 |
vulnerable | 2026-07-29 00:23:31.169541 |
OS Command Injection in BigPond Cable (BPA) Configuration in TP-Link TL-WR940N
An authenticated OS command injection vulnerability exists in the BigPond Cable (BPA) WAN configuration module in TL-WR940N v6 due to improper sanitization of user input. An attacker with administrative access may exploit this issue to execute arbitrary system commands with elevated privileges.
Published: 2026-06-16T21:03:13.733Z
Updated: 2026-06-18T03:56:12.777Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-11409 |
vulnerable | 2026-07-29 00:23:31.169207 |
OS Command Injection in IPv6 PPPoE Configuration in TP-Link TL-WR940N
An authenticated OS command injection vulnerability exists in the IPv6 PPPoE configuration handler in TL-WR940N v6 due to improper sanitization of user input. An attacker with administrative access may exploit this issue to execute arbitrary system commands with elevated privileges.
Published: 2026-06-16T21:03:47.128Z
Updated: 2026-06-18T03:56:11.660Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.