TP-Link Tl-PS310U Firmware vulnerabilities

4 CVEs affecting TP-Link Tl-PS310U Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-15057, published 2020-08-07.

More from TP-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-15055, published 2020-08-07. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to bypass authentication via a web-administration request that lacks a password parameter.
• CVE-2020-15057, published 2020-08-07. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to denial-of-service the device via long input values.
• CVE-2020-15056, published 2020-08-07. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to conduct persistent XSS attacks by leveraging administrative privileges to set a crafted…
• CVE-2020-15054, published 2020-08-07. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing…