Tp-link Tl-wdr4300 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Tp-link Tl-wdr4300 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2013-4654 — CVSS 9.8 (critical): Symlink Traversal vulnerability in TP-LINK TL-WDR4300 and TL-1043ND..
• CVE-2013-4848 — CVSS 8.8 (high): TP-Link TL-WDR4300 version 3.13.31 has multiple CSRF vulnerabilities.
• CVE-2019-6487 — CVSS 8.8 (high): TP-Link WDR Series devices through firmware v3 (such as TL-WDR5620 V3.0) are affected by command injection (after login) leading to remote…
• CVE-2015-3035 — CVSS 7.5 (high) — actively exploited: Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8…
• CVE-2014-4728 — CVSS 5.0 (medium): The web server in the TP-LINK N750 Wireless Dual Band Gigabit Router (TL-WDR4300) with firmware before 140916 allows remote attackers to…
• CVE-2014-4727 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in the DHCP clients page in the TP-LINK N750 Wireless Dual Band Gigabit Router (TL-WDR4300) with…