tp-link TL-PS310U Security Vulnerabilities

4 Vulnerabilities

Description
TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic. Impacted versions: - Base Score: 0.0, Severity: NA, ID: CVE-2020-15054, Last Modified: 2020-08-07T22:15:00Z References Advisory
TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to denial-of-service the device via long input values. Impacted versions: - Base Score: 0.0, Severity: NA, ID: CVE-2020-15057, Last Modified: 2020-08-07T22:15:00Z References Advisory
TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to bypass authentication via a web-administration request that lacks a password parameter. Impacted versions: - Base Score: 0.0, Severity: NA, ID: CVE-2020-15055, Last Modified: 2020-08-07T22:15:00Z References Advisory
TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to conduct persistent XSS attacks by leveraging administrative privileges to set a crafted server name. Impacted versions: - Base Score: 0.0, Severity: NA, ID: CVE-2020-15056, Last Modified: 2020-08-07T22:15:00Z References Advisory

Description

TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic.

Impacted versions: -

Base Score: 0.0, Severity: NA, ID: CVE-2020-15054, Last Modified: 2020-08-07T22:15:00Z

References

Advisory

TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to denial-of-service the device via long input values.

Impacted versions: -

Base Score: 0.0, Severity: NA, ID: CVE-2020-15057, Last Modified: 2020-08-07T22:15:00Z

References

Advisory

TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to bypass authentication via a web-administration request that lacks a password parameter.

Impacted versions: -

Base Score: 0.0, Severity: NA, ID: CVE-2020-15055, Last Modified: 2020-08-07T22:15:00Z

References

Advisory

TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to conduct persistent XSS attacks by leveraging administrative privileges to set a crafted server name.

Impacted versions: -

Base Score: 0.0, Severity: NA, ID: CVE-2020-15056, Last Modified: 2020-08-07T22:15:00Z

References

Advisory

USAGE: Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.