← Vulnerability feed
Start free
Open in platform
Vulnerability record · CVE-2013-4654 · published 13 November 2019
CVE-2013-4654: Tp-link tl-wdr4300 firmware path traversal vulnerability
Tp Link · Tl Wdr4300 Firmware
Symlink Traversal vulnerability in TP-LINK TL-WDR4300 and TL-1043ND..
9.8 CVSS 3.1 Critical EPSS 2.7% · top 14.6% CWE-22 · Path traversal
9.8CVSS 3.1 base score, v2 10.0
2.7%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
6References
16 Jun 2026Last modified by NVD
Description
Symlink Traversal vulnerability in TP-LINK TL-WDR4300 and TL-1043ND..
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
| Link | Tags |
|---|---|
| https://www.ise.io/casestudies/exploiting-soho-routers/ | MitigationThird Party Advisory |
| https://www.ise.io/soho_service_hacks/ | Third Party Advisory |
| https://www.ise.io/wp-content/uploads/2017/07/soho_techreport.pdf | Third Party Advisory |
| https://www.ise.io/casestudies/exploiting-soho-routers/ | MitigationThird Party Advisory |
| https://www.ise.io/soho_service_hacks/ | Third Party Advisory |
| https://www.ise.io/wp-content/uploads/2017/07/soho_techreport.pdf | Third Party Advisory |
Track CVE-2013-4654 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
7.5CVE-2015-3035TP-Link router directory traversal allows unauthenticated file readA path traversal flaw in the web interface of multiple TP-Link Archer and TL-WR/WDR router models lets a remote attacker read arbitrary files by plac…KEVEPSS 84%analysed6.5CVE-2023-50224TP-Link router httpd authentication bypass exposes stored credentialsThe httpd service on affected TP-Link router firmware contains an improper authentication flaw (CWE-290) that lets a network-adjacent attacker bypass…KEVEPSS 16%analysed8.8CVE-2013-4848Tp-link tl-wdr4300 firmware cross-site request forgery vulnerabilityTP-Link TL-WDR4300 version 3.13.31 has multiple CSRF vulnerabilities.EPSS 1.1%8.8CVE-2019-6487Tp-link tl-wdr5620 firmware os command injection vulnerabilityTP-Link WDR Series devices through firmware v3 (such as TL-WDR5620 V3.0) are affected by command injection (after login) leading to remote code execu…EPSS 8.5%5.0CVE-2014-4728Tp-link tl-wdr4300 firmware vulnerabilityThe web server in the TP-LINK N750 Wireless Dual Band Gigabit Router (TL-WDR4300) with firmware before 140916 allows remote attackers to cause a deni…EPSS 1.8%4.3CVE-2014-4727Tp-link tl-wdr4300 firmware cross-site scripting vulnerabilityCross-site scripting (XSS) vulnerability in the DHCP clients page in the TP-LINK N750 Wireless Dual Band Gigabit Router (TL-WDR4300) with firmware be…EPSS 2.0%9.8CVE-2026-93616Checkpoint multi-domain security management path traversal vulnerabilityA directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Managem…KEVEPSS 20%10.0CVE-2026-85706GitLab CE/EE repository commits API path traversal allows unauthenticated file readGitLab CE/EE contains improper path confinement and missing authentication enforcement in the repository commits API, allowing an unauthenticated use…KEVEPSS 91%analysed
Source: NIST National Vulnerability Database (record CVE-2013-4654), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.
