Tp-link Tl-wr902ac Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Tp-link Tl-wr902ac Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2022-25074 — CVSS 9.8 (critical): TP-Link TL-WR902AC(US)_V3_191209 routers were discovered to contain a stack overflow in the function DM_ Fillobjbystr(). This vulnerability…
• CVE-2022-48194 — CVSS 8.8 (high): TP-Link TL-WR902AC devices through V3 0.9.1 allow remote authenticated attackers to execute arbitrary code or cause a Denial of Service…
• CVE-2023-36489 — CVSS 8.8 (high): Multiple TP-LINK products allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands. Affected products/versions…
• CVE-2023-50225 — CVSS 6.8 (medium): TP-Link TL-WR902AC dm_fillObjByStr Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows…
• CVE-2023-44447 — CVSS 6.5 (medium): TP-Link TL-WR902AC loginFs Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent…