TP-Link Eap Controller
6 CVEs affecting TP-Link Eap Controller. Latest disclosed: 2018-09-28. Critical: 1, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-5393 | Critical | 9.8 | 2018-09-28 | The TP-LINK EAP Controller is TP-LINK's software for remotely controlling wireless access point devices. It utilizes a Java remote method invocation (RMI) serv… |
CVE-2018-10168 | High | 8.8 | 2018-05-03 | TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows do not control privileges for usage of the Web API, allowing a low-privilege u… |
CVE-2018-10166 | High | 8.8 | 2018-05-03 | The web management interface in the TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows does not have Anti-CSRF tokens in any form… |
CVE-2018-10167 | High | 7.5 | 2018-05-03 | The web application backup file in the TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows is encrypted with a hard-coded cryptogr… |
CVE-2018-10165 | Medium | 5.4 | 2018-05-03 | Stored Cross-site scripting (XSS) vulnerability in the TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows allows authenticated at… |
CVE-2018-10164 | Medium | 5.4 | 2018-05-03 | Stored Cross-site scripting (XSS) vulnerability in the TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows allows authenticated at… |