Known vulnerabilities in TL-WR940N

Vendor: TP-Link
Software: TL-WR940N
Software CPE: cpe:2.3:h:tp-link:tl-wr940n:*:*:*:*:*:*:*:*
Website: https://www.tp-link.com/us/
Total vulnerabilities: 11
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting TL-WR940N TL-WR940N is affected by 11 known vulnerabilities: 1 critical, 4 medium, 6 low Critical High Medium Low

Vulnerabilities (11)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU111164 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-33538		 CWE-78 Critical
Available
Exploited
 - 16.06.2025 SB2023060744
#VU103111 - Memory corruption
CVE-2024-54887		 CWE-119 Medium
No
No
 - 21.01.2025 SB2025012122
#VU69570 - Incorrect Implementation of Authentication Algorithm
CVE-2022-43635		 CWE-303 Low
No
No
 6_3.20.1 Build 220801 24.11.2022 SB2022112409
#VU69569 - Use of Insufficiently Random Values
CVE-2022-43636		 CWE-330 Medium
No
No
 6_3.20.1 Build 220801 24.11.2022 SB2022112409
#VU60813 - Stack-based buffer overflow
CVE-2022-0650		 CWE-121 Low
No
No
 211111 23.02.2022 SB2022021404
#VU60810 - Stack-based buffer overflow
CVE-2022-24973		 CWE-121 Low
No
No
 211111 23.02.2022 SB2022021404
#VU60809 - Improper Access Control
CVE-2022-24972		 CWE-284 Low
No
No
 211111 23.02.2022 SB2022021404
#VU60566 - Stack-based buffer overflow
CVE-2022-24355		 CWE-121 Medium
No
No
 211111 14.02.2022 SB2022021404
#VU19176 - Stack-based buffer overflow
CVE-2019-6989		 CWE-121 Medium
No
No
 - 15.07.2019 SB2019060609
#VU19058 - Improper Control of Interaction Frequency
 CWE-799 Low
No
No
 - 09.07.2019 SB2019070817
#VU19057 - Cross-Site Request Forgery (CSRF)
 CWE-352 Low
No
No
 - 09.07.2019 SB2019070817