TF
Product
Tl-wr902ac Firmware
On CISA KEVExploited in the wild
6
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 3Low 0
Watch
Add Tl-wr902ac Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-50224 In wildKEV | 6.5 | May 3 | TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability Affected: 1_160905; 1_170628 |
| CVE-2022-25074 | 9.8 | Feb 24 | TP-Link TL-WR902AC(US)_V3_191209 routers were discovered to contain a stack overflow in the function DM_ Fillobjbystr() Affected: 191209 |
| CVE-2023-36489 | 8.8 | Sep 6 | Multiple TP-LINK products allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands Affected: before 230506 |
| CVE-2022-48194 | 8.8 | Dec 30 | TP-Link TL-WR902AC devices through V3 0.9.1 allow remote authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS) by uploading a crafted firmware… Affected: through 3.0.9.1 |
| CVE-2023-50225 | 6.8 | May 3 | TP-Link TL-WR902AC dm_fillObjByStr Stack-based Buffer Overflow Remote Code Execution Vulnerability Affected: 0.9.1_0.3_v008a.0 |
| CVE-2023-44447 | 6.5 | May 3 | TP-Link TL-WR902AC loginFs Improper Authentication Information Disclosure Vulnerability Affected: 231025; 231027 |
Showing 6
