TP-Link Tl-r600vpn Firmware vulnerabilities

4 CVEs affecting TP-Link Tl-r600vpn Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-3951, published 2018-12-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-3949, published 2018-12-01. High severity, CVSS 7.5. EPSS: 53.3% chance of exploitation in the next 30 days. An exploitable information disclosure vulnerability exists in the HTTP server functionality of the TP-Link TL-R600VPN. A specially crafted URL can cause a directory traversal, resulting in the…
CVE-2018-3948, published 2018-11-30. High severity, CVSS 7.5. EPSS: 23.1% chance of exploitation in the next 30 days. An exploitable denial-of-service vulnerability exists in the URI-parsing functionality of the TP-Link TL-R600VPN HTTP server. A specially crafted URL can cause the server to stop responding to…
CVE-2018-3951, published 2018-12-01. High severity, CVSS 7.2. EPSS: 3.9% chance of exploitation in the next 30 days. An exploitable remote code execution vulnerability exists in the HTTP header-parsing function of the TP-Link TL-R600VPN HTTP Server. A specially crafted HTTP request can cause a buffer overflow,…
CVE-2018-3950, published 2018-12-01. High severity, CVSS 8.8. EPSS: 2.9% chance of exploitation in the next 30 days. An exploitable remote code execution vulnerability exists in the ping and tracert functionality of the TP-Link TL-R600VPN HWv3 FRNv1.3.0 and HWv2 FRNv1.2.3 http server. A specially crafted IP address…