Eap Controller (Tp-link) - vulnerabilities (CVEs)
6 CVEs, 0 in the last 30 days, 8 known versions, newest CVE from 2018-09-28. Vendor: Tp-link.
CVEs of Eap Controller
- CVE-2018-5393 - CVSS 9.8 (critical), 2018-09-28: The TP-LINK EAP Controller is TP-LINK's software for remotely controlling wireless access point devices. It utilizes a Java remote method invocation (RMI)…
- CVE-2018-10165 - CVSS 5.4 (medium), 2018-05-03: Stored Cross-site scripting (XSS) vulnerability in the TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows allows authenticated…
- CVE-2018-10168 - CVSS 8.8 (high), 2018-05-03: TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows do not control privileges for usage of the Web API, allowing a low-privilege…
- CVE-2018-10164 - CVSS 5.4 (medium), 2018-05-03: Stored Cross-site scripting (XSS) vulnerability in the TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows allows authenticated…
- CVE-2018-10167 - CVSS 7.5 (high), 2018-05-03: The web application backup file in the TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows is encrypted with a hard-coded…
- CVE-2018-10166 - CVSS 8.8 (high), 2018-05-03: The web management interface in the TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows does not have Anti-CSRF tokens in any…
