Tp-link Archer Ax10 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Tp-link Archer Ax10 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2023-34832 — CVSS 9.8 (critical): TP-Link Archer AX10(EU)_V1.2_230220 was discovered to contain a buffer overflow via the function FUN_131e8 - 0x132B4.
• CVE-2023-40357 — CVSS 8.0 (high): Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are…
• CVE-2021-40288 — CVSS 7.5 (high): A denial-of-service attack in WPA2, and WPA3-SAE authentication methods in TP-Link AX10v1 before V1_211014, allows a remote unauthenticated…
• CVE-2021-41451 — CVSS 7.5 (high): A misconfiguration in HTTP/1.0 and HTTP/1.1 of the web interface in TP-Link AX10v1 before V1_211117 allows a remote unauthenticated…