Tl-wr940n Firmware (Tp-link) - vulnerabilities (CVEs)
22 CVEs, 0 in the last 30 days, 11 known versions, newest CVE from 2026-06-16. Vendor: Tp-link.
CVEs of Tl-wr940n Firmware
- CVE-2026-11409 - CVSS 8.5 (high), 2026-06-16: An authenticated OS command injection vulnerability exists in the IPv6 PPPoE configuration handler in TL-WR940N v6 due to improper sanitization of user input.…
- CVE-2026-11410 - CVSS 8.5 (high), 2026-06-16: An authenticated OS command injection vulnerability exists in the BigPond Cable (BPA) WAN configuration module in TL-WR940N v6 due to improper sanitization of…
- CVE-2025-6151 - CVSS 8.2 (high), 2025-06-17: A vulnerability has been found in TP-Link TL-WR940N V4 and TL-WR841N V11. Affected by this issue is some unknown functionality of the file…
- CVE-2024-54887 - CVSS 8 (high), 2025-01-09: TP-Link TL-WR940N V3 and V4 with firmware 3.16.9 and earlier contain a buffer overflow via the dnsserver1 and dnsserver2 parameters at…
- CVE-2023-50224 - CVSS 6.5 (medium), 2024-05-03: TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose…
- CVE-2023-36354 - CVSS 7.5 (high), 2023-06-22: TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR740N V1/V2, TL-WR940N V2/V3, and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component…
- CVE-2023-36357 - CVSS 7.7 (high), 2023-06-22: An issue in the /userRpm/LocalManageControlRpm component of TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8/V10, and TL-WR941ND V5 allows attackers to cause a Denial…
- CVE-2023-36356 - CVSS 7.7 (high), 2023-06-22: TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8, TL-WR941ND V5, and TL-WR740N V1/V2 were discovered to contain a buffer read out-of-bounds via the component…
- CVE-2023-36359 - CVSS 7.5 (high), 2023-06-22: TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR940N V2/V3 and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component…
- CVE-2023-36355 - CVSS 9.9 (critical), 2023-06-22: TP-Link TL-WR940N V4 was discovered to contain a buffer overflow via the ipStart parameter at /userRpm/WanDynamicIpV6CfgRpm. This vulnerability allows…
- CVE-2023-36358 - CVSS 7.7 (high), 2023-06-22: TP-Link TL-WR940N V2/V3/V4, TL-WR941ND V5/V6, TL-WR743ND V1 and TL-WR841N V8 were discovered to contain a buffer overflow in the component…
- CVE-2023-33536 - CVSS 8.1 (high), 2023-06-07: TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a buffer overflow via the component /userRpm/WlanMacFilterRpm.
- CVE-2023-33538 - CVSS 8.8 (high), 2023-06-07: TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerability via the component…
- CVE-2023-33537 - CVSS 8.1 (high), 2023-06-07: TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a buffer overflow via the component /userRpm/FixMapCfgRpm.
- CVE-2022-43636 - CVSS 8.8 (high), 2023-03-29: This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of TP-Link TL-WR940N 6_211111 3.20.1(US) routers.…
- CVE-2022-43635 - CVSS 6.5 (medium), 2023-03-29: This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR940N 6_211111 3.20.1(US)…
- CVE-2022-24973 - CVSS 8 (high), 2023-03-28: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n…
- CVE-2022-24972 - CVSS 6.5 (medium), 2023-03-28: This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316…
- CVE-2022-0650 - CVSS 8 (high), 2023-03-28: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n…
- CVE-2023-23040 - CVSS 7.5 (high), 2023-02-22: TP-Link router TL-WR940N V6 3.19.1 Build 180119 uses a deprecated MD5 algorithm to hash the admin password used for basic authentication.
- CVE-2022-24355 - CVSS 8.8 (high), 2022-02-18: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n…
- CVE-2019-6989 - CVSS 8.8 (high), 2019-06-06: TP-Link TL-WR940N is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the ipAddrDispose function. By sending specially…
