TF
Product
Tl-wr940n Firmware
On CISA KEVExploited in the wild
22
CVEs
2
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 1High 18Medium 3Low 0
Watch
Add Tl-wr940n Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-33538 In wildKEV | 8.8 | Jun 7 | TP-Link Multiple Routers Command Injection Vulnerability Affected: All versions, or not specified |
| CVE-2023-50224 In wildKEV | 6.5 | May 3 | TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability Affected: 5_161019 through 5_220801; 6_170325 before 6_250925 |
| CVE-2023-36355 | 9.9 | Jun 22 | TP-Link TL-WR940N V4 was discovered to contain a buffer overflow via the ipStart parameter at /userRpm/WanDynamicIpV6CfgRpm Affected: All versions, or not specified |
| CVE-2022-43636 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of TP-Link TL-WR940N 6_211111 3.20.1(US) routers Affected: 6_211111_3.20.1 |
| CVE-2022-24355 | 8.8 | Feb 18 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n (5553) routers Affected: before 211111 |
| CVE-2019-6989 | 8.8 | Jun 6 | TP-Link TL-WR940N is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the ipAddrDispose function Affected: All versions, or not specified |
| CVE-2025-6151 | 8.2 | Jun 17 | A vulnerability has been found in TP-Link TL-WR940N V4 and TL-WR841N V11 Affected: All versions, or not specified |
| CVE-2023-33537 | 8.1 | Jun 7 | TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a buffer overflow via the component /userRpm/FixMapCfgRpm Affected: All versions, or not specified |
| CVE-2023-33536 | 8.1 | Jun 7 | TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a buffer overflow via the component /userRpm/WlanMacFilterRpm Affected: All versions, or not specified |
| CVE-2024-54887 | 8.0 | Jan 9 | TP-Link TL-WR940N V3 and V4 with firmware 3.16.9 and earlier contain a buffer overflow via the dnsserver1 and dnsserver2 parameters at /userRpm/Wan6to4TunnelCfgRpm.htm Affected: through 3.16.9 |
| CVE-2022-24973 | 8.0 | Mar 28 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n (5553) routers Affected: 3.20.1 |
| CVE-2022-0650 | 8.0 | Mar 28 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n (5553) routers Affected: before 211111 |
| CVE-2023-36358 | 7.7 | Jun 22 | TP-Link TL-WR940N V2/V3/V4, TL-WR941ND V5/V6, TL-WR743ND V1 and TL-WR841N V8 were discovered to contain a buffer overflow in the component /userRpm/AccessCtrlAccessTargetsRpm Affected: All versions, or not specified |
| CVE-2023-36357 | 7.7 | Jun 22 | An issue in the /userRpm/LocalManageControlRpm component of TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8/V10, and TL-WR941ND V5 allows attackers to cause a Denial of Service (DoS) via… Affected: All versions, or not specified |
| CVE-2023-36356 | 7.7 | Jun 22 | TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8, TL-WR941ND V5, and TL-WR740N V1/V2 were discovered to contain a buffer read out-of-bounds via the component /userRpm/VirtualServerRpm Affected: All versions, or not specified |
| CVE-2023-36359 | 7.5 | Jun 22 | TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR940N V2/V3 and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component /userRpm/QoSRuleListRpm Affected: All versions, or not specified |
| CVE-2023-36354 | 7.5 | Jun 22 | TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR740N V1/V2, TL-WR940N V2/V3, and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component… Affected: All versions, or not specified |
| CVE-2023-23040 | 7.5 | Feb 22 | TP-Link router TL-WR940N V6 3.19.1 Build 180119 uses a deprecated MD5 algorithm to hash the admin password used for basic authentication Affected: 6_3.19.1 |
| CVE-2026-11409 | 7.2 | Jun 16 | OS Command Injection in IPv6 PPPoE Configuration in TP-Link TL-WR940N Affected: before 260528 |
| CVE-2026-11410 | 7.2 | Jun 16 | OS Command Injection in BigPond Cable (BPA) Configuration in TP-Link TL-WR940N Affected: before 260528 |
| CVE-2022-43635 | 6.5 | Mar 29 | This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR940N 6_211111 3.20.1(US) routers Affected: 6_211111_3.20.1 |
| CVE-2022-24972 | 6.5 | Mar 28 | This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n (5553) routers Affected: 3.20.1 |
Showing 22