TP-Link Systems Inc. Tl-wr940n Firmware vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting TP-Link Systems Inc. Tl-wr940n Firmware: 4 record(s), with affected versions and fixes.cpe:2.3:o:tp-link:tl-wr940n_firmware
CVE-2026-11410
High · 7.2
CWE-78 Jun 17, 2026
OS Command Injection in BigPond Cable (BPA) Configuration in TP-Link TL-WR940N
An authenticated OS command injection vulnerability exists in the BigPond Cable (BPA) WAN configuration module in TL-WR940N v6 due to improper sanitization of user input. An attacker with administrative access may exploit this issue to execute arbitrary system commands with elevated privileges.
CVE-2026-11409
High · 7.2
CWE-78 Jun 17, 2026
OS Command Injection in IPv6 PPPoE Configuration in TP-Link TL-WR940N
An authenticated OS command injection vulnerability exists in the IPv6 PPPoE configuration handler in TL-WR940N v6 due to improper sanitization of user input. An attacker with administrative access may exploit this issue to execute arbitrary system commands with elevated privileges.
CVE-2023-50224
Medium · 6.5
KEV High · 53 CWE-290 May 3, 2024
TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability
TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.
CVE-2023-33538
High · 8.8
KEV High · 65 Public exploit CWE-77 Jun 7, 2023
TP-Link Multiple Routers Command Injection Vulnerability
TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerability via the component /userRpm/WlanNetworkRpm .