MEDIUM🇵🇱 Wersja polska

CVE-2014-4727

CVSS 4.3v2.0pub. 2014-09-30upd. 2026-05-06

Cross-site scripting (XSS) vulnerability in the DHCP clients page in the TP-LINK N750 Wireless Dual Band Gigabit Router (TL-WDR4300) with firmware before 140916 allows remote attackers to inject arbitrary web script or HTML via the hostname in a DHCP request.

CVSS Vector
AV:N/AC:M/Au:N/C:N/I:P/A:N

  • Tp Link Tl Wdr4300

    HW
    Tp-Link
    wszystkie wersje

  • Tp Link Tl Wdr4300 Firmware

    OS
    Tp-Link
    ≤ 130617
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
XSS
CWE
References

Related vulnerabilities

CVE-2013-4654CRITICAL9.8ten sam produkt

Symlink Traversal vulnerability in TP-LINK TL-WDR4300 and TL-1043ND..

CVE-2015-3035HIGH7.5⚠ KEVten sam produkt

Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmwa...

CVE-2013-4848HIGH8.8ten sam produkt

TP-Link TL-WDR4300 version 3.13.31 has multiple CSRF vulnerabilities.

CVE-2019-6487HIGH8.8ten sam produkt

TP-Link WDR Series devices through firmware v3 (such as TL-WDR5620 V3.0) are affected by command injection (af...

CVE-2014-4728MEDIUM5.0ten sam produkt

The web server in the TP-LINK N750 Wireless Dual Band Gigabit Router (TL-WDR4300) with firmware before 140916 ...