Advisories · Technology
TP-Link Systems Inc. RE305 v3.
Every CVE that names TP-Link Systems Inc. RE305 v3 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Unauthenticated Wireless Regulatory Region Configuration in TP-Link RE305
- TP-Link Systems Inc. RE305 v3
- Authentication bypass
- CVSS 6.9 Medium
Command Injection in tmpServer Allows Local Privilege Escalation in TP-Link RE305
- TP-Link Systems Inc. RE305 v3
- Command injection
- CVSS 8.7 High
Improper Authentication in TP-Link TDDP v2 Allows Root Command Execution in TP-Link RE305
- TP-Link Systems Inc. RE305 v3
- Command injection
- CVSS 6.1 Medium
Administrator Password Reset Through the Verification-Code Interface in TP-Link RE305
- TP-Link Systems Inc. RE305 v3
- Weak cryptography or TLS
- CVSS 6.9 Medium
Hardcoded AES-128 Key and Fixed IV in Configuration Backup Encryption in TP-Link RE305 and Archer C7
- TP-Link Systems Inc. RE305 v3
- TP-Link Systems Inc. Archer C7 v5
- Hard-coded credentials
- CVSS 6.1 Medium
Hardcoded Shared RSA-1024 Private Key in Web Login in TP-Link RE305 and Archer C7
- TP-Link Systems Inc. RE305 v3
- TP-Link Systems Inc. Archer C7 v5
- Hard-coded credentials