TP-Link WR840N Firmware vulnerabilities

2 CVEs affecting TP-Link WR840N Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-35575, published 2020-12-26.

More from TP-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-35575, published 2020-12-26. Critical severity, CVSS 9.8. EPSS: 7.6% chance of exploitation in the next 30 days. A password-disclosure issue in the web interface on certain TP-Link devices allows a remote attacker to get full administrative access to the web panel. This affects WA901ND devices before…
• CVE-2018-18489, published 2019-04-16. Medium severity, CVSS 4.9. EPSS: 1.7% chance of exploitation in the next 30 days. The ping feature in the Diagnostic functionality on TP-LINK WR840N v2 Firmware 3.16.9 Build 150701 Rel.51516n devices allows remote attackers to cause a denial of service (HTTP service termination)…