https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 12:05:23 +0000 https://vulnerability.circl.lu/vuln/bdu:2024-05529 bdu:2024-05529 https://vulnerability.circl.lu/vuln/bdu:2024-05529 https://vulnerability.circl.lu/vuln/fkie_cve-2024-38471 <p>Multiple TP-LINK products allow a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by restoring a crafted backup file. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi.</p> <p>Multiple TP-LINK products allow a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by restoring a crafted backup file. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2024-38471 https://vulnerability.circl.lu/vuln/ghsa-37mw-xfjf-m6pf <p>Multiple TP-LINK products allow a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by restoring a crafted backup file. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi.</p> <p>Multiple TP-LINK products allow a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by restoring a crafted backup file. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi.</p> https://vulnerability.circl.lu/vuln/ghsa-37mw-xfjf-m6pf https://vulnerability.circl.lu/vuln/jvndb-2024-003831 <p>Multiple products provided by TP-LINK contains an OS command injection vulnerability (CWE-78) related to the backup/restore function. Chuya Hayakawa of 00One, Inc. reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer.</p> <p>Multiple products provided by TP-LINK contains an OS command injection vulnerability (CWE-78) related to the backup/restore function. Chuya Hayakawa of 00One, Inc. reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer.</p> https://vulnerability.circl.lu/vuln/jvndb-2024-003831