TP-Link Tl-WR940N v2 Firmware vulnerabilities

2 CVEs affecting TP-Link Tl-WR940N v2 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-39747, published 2023-08-21.

More from TP-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-39747, published 2023-08-21. Critical severity, CVSS 9.8. EPSS: 8.7% chance of exploitation in the next 30 days. TP-Link WR841N V8, TP-Link TL-WR940N V2, and TL-WR941ND V5 were discovered to contain a buffer overflow via the radiusSecret parameter at /userRpm/WlanSecurityRpm.
• CVE-2023-39745, published 2023-08-21. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. TP-Link TL-WR940N V2, TP-Link TL-WR941ND V5 and TP-Link TL-WR841N V8 were discovered to contain a buffer overflow via the component /userRpm/AccessCtrlAccessRulesRpm. This vulnerability allows…