Advisories · Technology
TP-Link Systems Inc. HB710(US2) V1.6/1.0.
Every CVE that names TP-Link Systems Inc. HB710(US2) V1.6/1.0 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.6 High
OS Command Injection in Web Interface in Multiple TP-Link Aginet Devices
- TP-Link Systems Inc. HB810(US2) V1.0/1.6/2.0/2.6
- TP-Link Systems Inc. HB810(EU1) V2.0
- Command injection
- CVSS 5.1 Medium
Arbitrary File Read via Improper Symlink Handling in USB HTTPS Access Path in multiple TP-Link Aginet Devices
- TP-Link Systems Inc. HB810(US2) V1.0/1.6/2.0/2.6
- TP-Link Systems Inc. HB810(EU1) V2.0
- Path traversal
- CVSS 8.5 High
Sensitive Data Exposure due to Hardcoded Cryptographic Keys in Multiple TP-Link Aginet Devices
- TP-Link Systems Inc. HB810(US2) V1.0/1.6/2.0/2.6
- TP-Link Systems Inc. HB810(EU1) V2.0
- Hard-coded credentials
- CVSS 8.6 High
Privilege Escalation via Improper Authorization in User Management in multiple TP-Link Aginet Devices
- TP-Link Systems Inc. HB810(US2) V1.0/1.6/2.0/2.6
- TP-Link Systems Inc. HB810(EU1) V2.0
- Broken access control
- CVSS 8.7 High
Authentication Bypass via Broken Access Control in Web Server in Multiple TP-Link Aginet Devices
- TP-Link Systems Inc. HB810(US2) V1.0/1.6/2.0/2.6
- TP-Link Systems Inc. HB810(EU1) V2.0
- Broken access control