TP-Link Tl-WR1043ND Firmware vulnerabilities

4 CVEs affecting TP-Link Tl-WR1043ND Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-2646, published 2020-02-03.

More from TP-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-16119, published 2019-06-20. High severity, CVSS 7.2. EPSS: 33.6% chance of exploitation in the next 30 days. Stack-based buffer overflow in the httpd server of TP-Link WR1043nd (Firmware Version 3) allows remote attackers to execute arbitrary code via a malicious MediaServer request to…
• CVE-2019-6971, published 2019-06-19. Critical severity, CVSS 9.8. EPSS: 13.7% chance of exploitation in the next 30 days. An issue was discovered on TP-Link TL-WR1043ND V2 devices. An attacker can send a cookie in an HTTP authentication packet to the router management web interface, and fully control the router without…
• CVE-2013-2646, published 2020-02-03. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. TP-LINK TL-WR1043ND V1_120405 devices contain an unspecified denial of service vulnerability.
• CVE-2019-6972, published 2019-06-19. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. An issue was discovered on TP-Link TL-WR1043ND V2 devices. The credentials can be easily decoded and cracked by brute-force, WordList, or Rainbow Table attacks. Specifically, credentials in the…