TP-Link TL-WR802N

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:h:tp-link:tl-wr802n:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorTp Link (0b2e1553-ac8b-5981-a60b-ca6c27ee3a6e)
ProductTl Wr802N (449a8d4e-5906-55a1-8dac-341b56a6507a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-36489 not_vulnerable 2026-06-08 06:08:12.044476 Details available
Multiple TP-LINK products allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: TL-WR802N firmware versions prior to 'TL-WR802N(JP)_V4_221008', TL-WR841N firmware versions prior to 'TL-WR841N(JP)_V14_230506', and TL-WR902AC firmware versions prior to 'TL-WR902AC(JP)_V3_230506'.
Published: 2023-09-06T09:35:41.575Z
Updated: 2024-09-26T20:03:19.698Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3275 not_vulnerable 2026-06-08 05:33:51.064864 Details available
Unauthenticated stored cross-site scripting (XSS) exists in multiple TP-Link products including WIFI Routers (Wireless AC routers), Access Points, ADSL + DSL Gateways and Routers, which affects TD-W9977v1, TL-WA801NDv5, TL-WA801Nv6, TL-WA802Nv5, and Archer C3150v2 devices through the improper validation of the hostname. Some of the pages including dhcp.htm, networkMap.htm, dhcpClient.htm, qsEdit.htm, and qsReview.htm and use this vulnerable hostname function (setDefaultHostname()) without sanitization.
Published: 2021-03-26T12:21:23.000Z
Updated: 2024-08-03T16:53:17.136Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.