Tl-wr840n Firmware (Tp-link) - vulnerabilities (CVEs)

22 CVEs, 0 in the last 30 days, 26 known versions, newest CVE from 2026-03-16. Vendor: Tp-link.

CVEs of Tl-wr840n Firmware

CVE-2026-3227 - CVSS 8.5 (high), 2026-03-16: A command injection vulnerability was identified in TP-Link TL-WR802N v4, TL-WR841N v14, and TL-WR840N v6 due to improper neutralization of special elements…
CVE-2023-50224 - CVSS 6.5 (medium), 2024-05-03: TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose…
CVE-2023-39471 - CVSS 8.8 (high), 2024-05-03: TP-Link TL-WR841N ated_tp Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary…
CVE-2022-29402 - CVSS 6.8 (medium), 2022-05-25: TP-Link TL-WR840N EU v6.20 was discovered to contain insecure protections for its UART console. This vulnerability allows attackers to connect to the UART…
CVE-2021-46122 - CVSS 7.2 (high), 2022-04-18: Tp-Link TL-WR840N (EU) v6.20 Firmware (0.9.1 4.17 v0001.0 Build 201124 Rel.64328n) is vulnerable to Buffer Overflow via the Password reset feature.
CVE-2022-26639 - CVSS 7.2 (high), 2022-03-28: TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the DNSServers parameter.
CVE-2022-26642 - CVSS 7.2 (high), 2022-03-28: TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the X_TP_ClonedMACAddress parameter.
CVE-2022-26641 - CVSS 7.2 (high), 2022-03-28: TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the httpRemotePort parameter.
CVE-2022-26640 - CVSS 7.2 (high), 2022-03-28: TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the minAddress parameter.
CVE-2022-25061 - CVSS 9.8 (critical), 2022-02-25: TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_setIp6DefaultRoute.
CVE-2022-25060 - CVSS 9.8 (critical), 2022-02-25: TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_startPing.
CVE-2022-25064 - CVSS 9.8 (critical), 2022-02-25: TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a remote code execution (RCE) vulnerability via the function oal_wan6_setIpAddr.
CVE-2022-25062 - CVSS 7.5 (high), 2022-02-25: TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain an integer overflow via the function dm_checkString. This vulnerability allows attackers to cause…
CVE-2021-41653 - CVSS 9.8 (critical), 2021-11-13: The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840N(EU)_V5_171211 is vulnerable to remote code execution via a crafted…
CVE-2021-29280 - CVSS 6.4 (medium), 2021-08-19: In TP-Link Wireless N Router WR840N an ARP poisoning attack can cause buffer overflow
CVE-2020-36178 - CVSS 9.8 (critical), 2021-01-06: oal_ipt_addBridgeIsolationRules on TP-Link TL-WR840N 6_EU_0.9.1_4.16 devices allows OS command injection because a raw string entered from the web interface…
CVE-2019-15060 - CVSS 8.8 (high), 2019-08-22: The traceroute function on the TP-Link TL-WR840N v4 router with firmware through 0.9.1 3.16 is vulnerable to remote code execution via a crafted payload in an…
CVE-2019-12195 - CVSS 4.8 (medium), 2019-05-24: TP-Link TL-WR840N v5 00000005 devices allow XSS via the network name. The attacker must log into the router by breaking the password and going to the admin…
CVE-2018-15840 - CVSS 7.5 (high), 2019-03-29: TP-Link TL-WR840N devices allow remote attackers to cause a denial of service (networking outage) via fragmented packets, as demonstrated by an "nmap -f"…
CVE-2018-15172 - CVSS 7.5 (high), 2018-08-15: TP-Link WR840N devices have a buffer overflow via a long Authorization HTTP header.
CVE-2018-11714 - CVSS 9.8 (critical), 2018-06-04: An issue was discovered on TP-Link TL-WR840N v5 00000005 0.9.1 3.16 v0001.0 Build 170608 Rel.58696n and TL-WR841N v13 00000013 0.9.1 4.16 v0001.0 Build 170622…
CVE-2014-9510 - CVSS 6.8 (medium), 2015-01-09: Cross-site request forgery (CSRF) vulnerability in the administration console in TP-Link TL-WR840N (V1) router with firmware before 3.13.27 build 141120…