GCVE - cpe:2.3:h:tp-link:tl-wdr4300:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:tp-link:tl-wdr4300:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Tp Link (`0b2e1553-ac8b-5981-a60b-ca6c27ee3a6e`)
Product	Tl Wdr4300 (`5f30a1b7-2ed6-5448-a34e-f3bf0bc885c4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-6487`	not_vulnerable	2026-06-08 05:14:11.698145	Details available TP-Link WDR Series devices through firmware v3 (such as TL-WDR5620 V3.0) are affected by command injection (after login) leading to remote code execution, because shell metacharacters can be included in the weather get_weather_observe citycode field. Published: 2019-01-18T10:00:00.000Z Updated: 2024-09-17T03:22:42.398Z Open on db.gcve.eu Reference links https://github.com/0xcc-Since2016/TP-Link-WDR-Router-Command-injection_POC/blob/master/poc.py	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-4728`	vulnerable	2026-06-08 05:05:45.634739	Details available The web server in the TP-LINK N750 Wireless Dual Band Gigabit Router (TL-WDR4300) with firmware before 140916 allows remote attackers to cause a denial of service (crash) via a long header in a GET request. Published: 2014-09-30T16:00:00.000Z Updated: 2024-08-06T11:27:36.248Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/96140 http://www.securityfocus.com/archive/1/533501/100/0/threaded http://seclists.org/fulldisclosure/2014/Sep/80 http://www.securityfocus.com/bid/70037 http://www.securityfocus.com/archive/1/533499/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-4727`	vulnerable	2026-06-08 05:05:45.634244	Details available Cross-site scripting (XSS) vulnerability in the DHCP clients page in the TP-LINK N750 Wireless Dual Band Gigabit Router (TL-WDR4300) with firmware before 140916 allows remote attackers to inject arbitrary web script or HTML via the hostname in a DHCP request. Published: 2014-09-30T16:00:00.000Z Updated: 2024-08-06T11:27:36.100Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/96139 http://www.securityfocus.com/archive/1/533501/100/0/threaded http://www.securityfocus.com/archive/1/533499/100/0/threaded http://seclists.org/fulldisclosure/2014/Sep/80 http://www.securityfocus.com/bid/70037	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4848`	not_vulnerable	2026-06-08 05:04:49.932359	Details available TP-Link TL-WDR4300 version 3.13.31 has multiple CSRF vulnerabilities. Published: 2019-10-25T16:03:09.000Z Updated: 2024-08-06T16:59:40.992Z Open on db.gcve.eu Reference links https://www.ise.io/casestudies/exploiting-soho-routers/ https://www.ise.io/soho_service_hacks/ https://www.ise.io/wp-content/uploads/2017/06/soho_defcon21.pdf https://www.securityfocus.com/bid/62884/info https://vuldb.com/?id.10495	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4654`	not_vulnerable	2026-06-08 05:04:48.990942	Details available Symlink Traversal vulnerability in TP-LINK TL-WDR4300 and TL-1043ND.. Published: 2019-11-13T15:56:46.000Z Updated: 2024-08-06T16:52:26.640Z Open on db.gcve.eu Reference links https://www.ise.io/casestudies/exploiting-soho-routers/ https://www.ise.io/soho_service_hacks/ https://www.ise.io/wp-content/uploads/2017/07/soho_techreport.pdf	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.