Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

TP-Link Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2025-15544`Weak Credential Protection During TP-Link Omada Device Adoption	Exploitation statusNot known exploited	FixYes	Affected productOmada gateways	Published08/03/2026	SeverityMedium
`CVE-2018-25321`TP-Link TL-WR720N CSRF via Administrative Interfaces (firmware V1_130719)	Exploitation statusPublic exploit	FixNot confirmed	Affected productTL-WR720NMbps Wireless N Router	Published05/17/2026	SeverityMedium
`CVE-2025-9293`Insufficient Certificate Validation in Multiple Mobile Applications Allows Man in the Middle Interception	Exploitation statusNot known exploited	FixYes	Affected productTapo App	Published02/13/2026	SeverityHigh
`CVE-2025-9292`Permissive Web Security Policy Allows Cross-Origin Access Control Bypass on Omada Cloud Controllers	Exploitation statusNot known exploited	FixYes	Affected productOmada cloud controller	Published02/13/2026	SeverityLow
`CVE-2025-9522`Blind Server-Side Request Forgery (SSRF) in Omada Controller	Exploitation statusNot known exploited	FixYes	Affected productOmada Controller	Published01/26/2026	SeverityMedium
`CVE-2025-9521`Password Confirmation Bypass in Omada Controller	Exploitation statusNot known exploited	FixYes	Affected productOmada Controller	Published01/26/2026	SeverityLow
`CVE-2025-9520`IDOR Leading to Owner Account Hijacking in Omada Controller	Exploitation statusNot known exploited	FixYes	Affected productOmada Controller	Published01/26/2026	SeverityHigh
`CVE-2025-40634`Stack-based buffer overflow in TP-Link Archer AX50	Exploitation statusNot known exploited	FixYes	Affected productLink Archer AX50	Published05/20/2025	SeverityCritical
`CVE-2025-3442`Information Disclosure Vulnerability in TP-Link Tapo IoT Smart Hub	Exploitation statusNot known exploited	FixYes	Affected productTapo H200 V1 IoT Smart Hub	Published04/09/2025	SeverityMedium
`CVE-2025-1099`Information Disclosure Vulnerability in TP-Link Tapo C500 Wi-Fi Camera	Exploitation statusNot known exploited	FixYes	Affected productTapo C500 V1 Wi-Fi Camera	Published02/10/2025	SeverityHigh
`CVE-2025-0730`TP-Link TL-SG108E HTTP GET Request usr_account_set.cgi get request method with sensitive query strings	Exploitation statusPublic exploit	FixYes	Affected productTL-SG108E	Published01/27/2025	SeverityMedium
`CVE-2025-0729`TP-Link TL-SG108E clickjacking	Exploitation statusNot known exploited	FixYes	Affected productTL-SG108E	Published01/27/2025	SeverityMedium
`CVE-2024-12344`TP-Link VN020 F3v(T) FTP USER Command memory corruption	Exploitation statusPublic exploit	FixNot confirmed	Affected productVN020 F3v(T)	Published12/08/2024	SeverityMedium
`CVE-2024-12343`TP-Link VN020 F3v(T) SOAP Request WANIPConnection buffer overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productVN020 F3v(T)	Published12/08/2024	SeverityHigh
`CVE-2024-12342`TP-Link VN020 F3v(T) Incomplete SOAP Request WANIPConnection denial of service	Exploitation statusPublic exploit	FixNot confirmed	Affected productVN020 F3v(T)	Published12/08/2024	SeverityHigh
`CVE-2024-54127`Exposure of Wi-Fi Credentials in Plaintext in TP-Link Archer C50	Exploitation statusNot known exploited	FixYes	Affected productArcher C50 Wireless Router	Published12/05/2024	SeverityMedium
`CVE-2024-54126`Insufficient Integrity Verification Vulnerability in TP-Link Archer C50	Exploitation statusNot known exploited	FixYes	Affected productArcher C50 Wireless Router	Published12/05/2024	SeverityHigh
`CVE-2024-53375`	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published12/02/2024	SeverityHigh
`CVE-2024-53623`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published11/29/2024	SeverityHigh
`CVE-2024-48288`	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published11/21/2024	SeverityHigh
`CVE-2024-11237`TP-Link VN020 F3v(T) DHCP DISCOVER Packet Parser TP-Thumper stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productVN020 F3v(T)	Published11/15/2024	SeverityHigh
`CVE-2024-10523`Information Disclosure Vulnerability in TP-Link IoT Smart Hub	Exploitation statusNot known exploited	FixYes	Affected productTP-Link Tapo H100 IoT Smart Hub	Published11/04/2024	SeverityMedium
`CVE-2024-22733`	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published11/01/2024	SeverityLow
`CVE-2024-48713`	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published10/15/2024	SeverityMedium
`CVE-2024-48712`	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published10/15/2024	SeverityMedium
`CVE-2024-48714`	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published10/15/2024	SeverityMedium
`CVE-2024-48710`	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published10/15/2024	SeverityMedium
`CVE-2024-46325`	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published10/07/2024	SeverityMedium
`CVE-2024-46486`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published10/04/2024	SeverityHigh
`CVE-2024-46313`	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published09/30/2024	SeverityHigh
`CVE-2024-9284`TP-LINK TL-WR841ND popupSiteSurveyRpm.htm stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productTL-WR841ND	Published09/27/2024	SeverityHigh
`CVE-2024-42815`	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published08/19/2024	SeverityCritical
`CVE-2024-4224`TP-Link TL-SG1016DE XSS	Exploitation statusPublic exploit	FixYes	Affected productTL-SG1016DE	Published07/15/2024	SeverityMedium
`CVE-2024-38471`	Exploitation statusNot known exploited	FixNot confirmed	Affected productArcher AX3000	Published07/04/2024	SeverityMedium
`CVE-2024-21827`	Exploitation statusPublic exploit	FixNot confirmed	Affected productER7206 Omada Gigabit VPN Router	Published06/25/2024	SeverityHigh
`CVE-2024-37662`	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published06/17/2024	SeverityMedium
`CVE-2024-37661`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published06/17/2024	SeverityMedium
`CVE-2024-5035`TP-Link Archer C5400X - RFTest Unauthenticated Command Injection	Exploitation statusNot known exploited	FixYes	Affected productArcher C4500X	Published05/27/2024	SeverityHigh
`CVE-2024-5244`TP-Link Omada ER605 Reliance on Security Through Obscurity Vulnerability	Exploitation statusNot known exploited	FixNot confirmed	Affected productOmada ER605	Published05/23/2024	SeverityMedium
`CVE-2024-5243`TP-Link Omada ER605 Buffer Overflow Remote Code Execution Vulnerability	Exploitation statusNot known exploited	FixNot confirmed	Affected productOmada ER605	Published05/23/2024	SeverityHigh
`CVE-2024-5242`TP-Link Omada ER605 Stack-based Buffer Overflow Remote Code Execution Vulnerability	Exploitation statusNot known exploited	FixNot confirmed	Affected productOmada ER605	Published05/23/2024	SeverityHigh
`CVE-2024-5228`TP-Link Omada ER605 Comexe DDNS Response Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability	Exploitation statusNot known exploited	FixNot confirmed	Affected productOmada ER605	Published05/23/2024	SeverityHigh
`CVE-2024-5227`TP-Link Omada ER605 PPTP VPN username Command Injection Remote Code Execution Vulnerability	Exploitation statusNot known exploited	FixNot confirmed	Affected productOmada ER605	Published05/23/2024	SeverityHigh
`CVE-2024-31340`	Exploitation statusNot known exploited	FixNot confirmed	Affected productTP-Link Tether	Published05/22/2024	SeverityMedium
`CVE-2023-50225`TP-Link TL-WR902AC dm_fillObjByStr Stack-based Buffer Overflow Remote Code Execution Vulnerability	Exploitation statusNot known exploited	FixNot confirmed	Affected productTL-WR902AC	Published05/03/2024	SeverityMedium
`CVE-2023-50224`TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability	Exploitation statusKEV	FixNot confirmed	Affected productTL-WR841N	Published05/03/2024	SeverityMedium
`CVE-2023-44448`TP-Link Archer A54 libcmm.so dm_fillObjByStr Stack-based Buffer Overflow Remote Code Execution Vulnerability	Exploitation statusNot known exploited	FixNot confirmed	Affected productArcher A54	Published05/03/2024	SeverityMedium
`CVE-2023-44447`TP-Link TL-WR902AC loginFs Improper Authentication Information Disclosure Vulnerability	Exploitation statusNot known exploited	FixNot confirmed	Affected productTL-WR902AC	Published05/03/2024	SeverityMedium
`CVE-2023-41184`TP-Link Tapo C210 ActiveCells Stack-based Buffer Overflow Remote Code Execution Vulnerability	Exploitation statusNot known exploited	FixNot confirmed	Affected productTapo C210	Published05/03/2024	SeverityMedium
`CVE-2023-39471`TP-Link TL-WR841N ated_tp Command Injection Remote Code Execution Vulnerability	Exploitation statusNot known exploited	FixNot confirmed	Affected productTL-WR841N	Published05/03/2024	SeverityHigh
`CVE-2023-35717`TP-Link Tapo C210 Password Recovery Authentication Bypass Vulnerability	Exploitation statusNot known exploited	FixNot confirmed	Affected productTapo C210	Published05/03/2024	SeverityHigh
`CVE-2023-27359`TP-Link AX1800 hotplugd Firewall Rule Race Condition Vulnerability	Exploitation statusNot known exploited	FixNot confirmed	Affected productAX1800	Published05/03/2024	SeverityCritical
`CVE-2023-27346`TP-Link AX1800 Firmware Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability	Exploitation statusNot known exploited	FixNot confirmed	Affected productAX1800	Published05/03/2024	SeverityHigh
`CVE-2023-27333`TP-Link Archer AX21 tmpServer Command 0x422 Stack-based Buffer Overflow Remote Code Execution Vulnerability	Exploitation statusNot known exploited	FixNot confirmed	Affected productArcher AX21	Published05/03/2024	SeverityMedium
`CVE-2023-27332`TP-Link Archer AX21 tdpServer Logging Stack-based Buffer Overflow Remote Code Execution Vulnerability	Exploitation statusNot known exploited	FixNot confirmed	Affected productArcher AX21	Published05/03/2024	SeverityHigh
`CVE-2023-49074`	Exploitation statusNot known exploited	FixNot confirmed	Affected productAC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)	Published04/09/2024	SeverityHigh
`CVE-2023-49134`	Exploitation statusNot known exploited	FixNot confirmed	Affected productAC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)	Published04/09/2024	SeverityHigh
`CVE-2023-49133`	Exploitation statusNot known exploited	FixNot confirmed	Affected productAC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)	Published04/09/2024	SeverityHigh
`CVE-2023-48724`	Exploitation statusNot known exploited	FixNot confirmed	Affected productAC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)	Published04/09/2024	SeverityHigh
`CVE-2023-49913`	Exploitation statusNot known exploited	FixNot confirmed	Affected productAC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)	Published04/09/2024	SeverityHigh
`CVE-2023-49912`	Exploitation statusNot known exploited	FixNot confirmed	Affected productAC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)	Published04/09/2024	SeverityHigh
`CVE-2023-49911`	Exploitation statusNot known exploited	FixNot confirmed	Affected productAC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)	Published04/09/2024	SeverityHigh
`CVE-2023-49910`	Exploitation statusNot known exploited	FixNot confirmed	Affected productAC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)	Published04/09/2024	SeverityHigh
`CVE-2023-49909`	Exploitation statusNot known exploited	FixNot confirmed	Affected productAC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)	Published04/09/2024	SeverityHigh
`CVE-2023-49908`	Exploitation statusNot known exploited	FixNot confirmed	Affected productAC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)	Published04/09/2024	SeverityHigh
`CVE-2023-49907`	Exploitation statusNot known exploited	FixNot confirmed	Affected productAC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)	Published04/09/2024	SeverityHigh
`CVE-2023-49906`	Exploitation statusNot known exploited	FixNot confirmed	Affected productAC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)	Published04/09/2024	SeverityHigh
`CVE-2024-1180`TP-Link Omada ER605 Access Control Command Injection Remote Code Execution Vulnerability	Exploitation statusNot known exploited	FixNot confirmed	Affected productOmada ER605	Published04/03/2024	SeverityMedium
`CVE-2024-1179`TP-Link Omada ER605 DHCPv6 Client Options Stack-based Buffer Overflow Remote Code Execution Vulnerability	Exploitation statusNot known exploited	FixNot confirmed	Affected productOmada ER605	Published04/01/2024	SeverityHigh
`CVE-2023-6437`Authenticated RCE	Exploitation statusNot known exploited	FixYes	Affected productTP-Link EX20v AX1800, Tp-Link Archer C5v AC1200, Tp-Link TD-W9970, Tp-Link TD-W9970v3, TP-Link VX220-G2u, TP-Link VN020-G2u	Published03/28/2024	SeverityCritical
`CVE-2024-25139`	Exploitation statusNot known exploited	FixYes	Affected productNot confirmed	Published03/14/2024	SeverityCritical
`CVE-2024-2188`Cross-Site Scripting vulnerability in TP-Link Archer AX50	Exploitation statusNot known exploited	FixYes	Affected productArcher AX50	Published03/05/2024	SeverityMedium
`CVE-2023-43318`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published03/05/2024	SeverityHigh
`CVE-2023-43482`	Exploitation statusPublic exploit	FixNot confirmed	Affected productER7206 Omada Gigabit VPN Router	Published02/06/2024	SeverityHigh
`CVE-2023-36498`	Exploitation statusNot known exploited	FixNot confirmed	Affected productER7206 Omada Gigabit VPN Router	Published02/06/2024	SeverityHigh
`CVE-2023-47209`	Exploitation statusPublic exploit	FixNot confirmed	Affected productER7206 Omada Gigabit VPN Router	Published02/06/2024	SeverityHigh
`CVE-2023-47167`	Exploitation statusPublic exploit	FixNot confirmed	Affected productER7206 Omada Gigabit VPN Router	Published02/06/2024	SeverityHigh
`CVE-2023-42664`	Exploitation statusPublic exploit	FixNot confirmed	Affected productER7206 Omada Gigabit VPN Router	Published02/06/2024	SeverityHigh
`CVE-2023-46683`	Exploitation statusPublic exploit	FixNot confirmed	Affected productER7206 Omada Gigabit VPN Router	Published02/06/2024	SeverityHigh
`CVE-2023-47617`	Exploitation statusNot known exploited	FixNot confirmed	Affected productER7206 Omada Gigabit VPN Router	Published02/06/2024	SeverityHigh
`CVE-2023-47618`	Exploitation statusPublic exploit	FixNot confirmed	Affected productER7206 Omada Gigabit VPN Router	Published02/06/2024	SeverityHigh
`CVE-2023-49515`	Exploitation statusPublic exploit	FixYes	Affected productNot confirmed	Published01/17/2024	SeverityMedium
`CVE-2024-21833`	Exploitation statusNot known exploited	FixNot confirmed	Affected productArcher AX3000	Published01/10/2024	SeverityHigh
`CVE-2024-21821`	Exploitation statusNot known exploited	FixNot confirmed	Affected productArcher AX3000	Published01/10/2024	SeverityHigh
`CVE-2024-21773`	Exploitation statusNot known exploited	FixNot confirmed	Affected productArcher AX3000	Published01/10/2024	SeverityHigh
`CVE-2023-34829`	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published12/28/2023	SeverityMedium
`CVE-2023-39610`	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published10/31/2023	SeverityUnknown
`CVE-2023-46536`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published10/25/2023	SeverityHigh
`CVE-2023-46538`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published10/25/2023	SeverityHigh
`CVE-2023-46534`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published10/25/2023	SeverityHigh
`CVE-2023-46522`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published10/25/2023	SeverityHigh
`CVE-2023-46526`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published10/25/2023	SeverityHigh
`CVE-2023-46527`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published10/25/2023	SeverityHigh
`CVE-2023-46521`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published10/25/2023	SeverityHigh
`CVE-2023-46539`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published10/25/2023	SeverityHigh
`CVE-2023-46525`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published10/25/2023	SeverityHigh
`CVE-2023-46535`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published10/25/2023	SeverityHigh
`CVE-2023-46520`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published10/25/2023	SeverityHigh
`CVE-2023-46523`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published10/25/2023	SeverityHigh
`CVE-2023-46537`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published10/25/2023	SeverityHigh