TP-Link Tl-WRN841N Firmware vulnerabilities

3 CVEs affecting TP-Link Tl-WRN841N Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-15702, published 2018-10-01.

More from TP-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-15701, published 2018-10-01. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. The web interface in TP-Link TL-WRN841N 0.9.1 4.16 v0348.0 is vulnerable to a denial of service when an unauthenticated LAN user sends a crafted HTTP header containing an unexpected Cookie field.
• CVE-2018-15700, published 2018-10-01. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. The web interface in TP-Link TL-WRN841N 0.9.1 4.16 v0348.0 is vulnerable to a denial of service when an unauthenticated LAN user sends a crafted HTTP header containing an unexpected Referer field.
• CVE-2018-15702, published 2018-10-01. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. The web interface in TP-Link TL-WRN841N 0.9.1 4.16 v0348.0 is vulnerable to CSRF due to insufficient validation of the referer field.