Multiple HTML code injection vulnerabilities in TP Link Gateway

Release date:
Updated on:

Affected Systems:
TP-LINK TP Link Gateway
Description:
--------------------------------------------------------------------------------
Bugtraq id: 54396

TP Link is a provider specialized in R & D, manufacturing, and sales of network and communication equipment.

Multiple HTML code injection vulnerabilities exist in the implementation of the TP Link gateway. These vulnerabilities can be exploited to execute HTML and script code on the device to steal authentication creden。 or control the appearance of the site.

<* Source: Ibrahim El-Sayed
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

TP-LINK
-------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://www.tp-link.com/products/