Tl-wpa4220 Firmware (Tp-link) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2021-06-15. Vendor: Tp-link.

CVEs of Tl-wpa4220 Firmware

• CVE-2021-28857 - CVSS 7.5 (high), 2021-06-15: TP-Link's TL-WPA4220 4.0.2 Build 20180308 Rel.37064 username and password are sent via the cookie.
• CVE-2021-28858 - CVSS 5.5 (medium), 2021-06-15: TP-Link's TL-WPA4220 4.0.2 Build 20180308 Rel.37064 does not use SSL by default. Attacker on the local network can monitor traffic and capture the cookie and…
• CVE-2020-28005 - CVSS 6.5 (medium), 2020-11-18: httpd on TP-Link TL-WPA4220 devices (hardware versions 2 through 4) allows remote authenticated users to trigger a buffer overflow (causing a denial of…
• CVE-2020-24297 - CVSS 8.8 (high), 2020-11-18: httpd on TP-Link TL-WPA4220 devices (versions 2 through 4) allows remote authenticated users to execute arbitrary OS commands by sending crafted POST requests…