tp-link TL-WR740N Security Vulnerabilities

1 Vulnerabilities

Description
On TP-Link TL-WR740N v4 and TL-WR740ND v4 devices, an attacker with access to the admin panel can inject HTML code and change the HTML context of the target pages and stations in the access-control settings via targets_lists_name or hosts_lists_name. The vulnerability can also be exploited through a CSRF, requiring no authentication as an administrator. Impacted versions: - Base Score: 0.0, Severity: NA, ID: CVE-2020-14965, Last Modified: 2020-06-23T14:15:00Z References Advisory Modemly Security Checklist TP-Link-TL-WR740N-router-setup

Description

On TP-Link TL-WR740N v4 and TL-WR740ND v4 devices, an attacker with access to the admin panel can inject HTML code and change the HTML context of the target pages and stations in the access-control settings via targets_lists_name or hosts_lists_name. The vulnerability can also be exploited through a CSRF, requiring no authentication as an administrator.

Impacted versions: -

Base Score: 0.0, Severity: NA, ID: CVE-2020-14965, Last Modified: 2020-06-23T14:15:00Z

References

Advisory

Modemly Security Checklist

TP-Link-TL-WR740N-router-setup

USAGE: Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.