← Vulnerability feed
Start free
Open in platform
Vulnerability record · CVE-2013-4848 · published 25 October 2019
CVE-2013-4848: Tp-link tl-wdr4300 firmware cross-site request forgery vulnerability
Tp Link · Tl Wdr4300 Firmware
TP-Link TL-WDR4300 version 3.13.31 has multiple CSRF vulnerabilities.
8.8 CVSS 3.1 High EPSS 1.1% · top 34.5% CWE-352 · Cross-site request forgery
8.8CVSS 3.1 base score, v2 9.3
1.1%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
10References, 2 tagged exploit
16 Jun 2026Last modified by NVD
Description
TP-Link TL-WDR4300 version 3.13.31 has multiple CSRF vulnerabilities.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
| Link | Tags |
|---|---|
| https://vuldb.com/?id.10495 | Third Party Advisory |
| https://www.ise.io/casestudies/exploiting-soho-routers/ | ExploitThird Party Advisory |
| https://www.ise.io/soho_service_hacks/ | Third Party Advisory |
| https://www.ise.io/wp-content/uploads/2017/06/soho_defcon21.pdf | Third Party Advisory |
| https://www.securityfocus.com/bid/62884/info | Third Party AdvisoryVDB Entry |
| https://vuldb.com/?id.10495 | Third Party Advisory |
| https://www.ise.io/casestudies/exploiting-soho-routers/ | ExploitThird Party Advisory |
| https://www.ise.io/soho_service_hacks/ | Third Party Advisory |
| https://www.ise.io/wp-content/uploads/2017/06/soho_defcon21.pdf | Third Party Advisory |
| https://www.securityfocus.com/bid/62884/info | Third Party AdvisoryVDB Entry |
Track CVE-2013-4848 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
7.5CVE-2015-3035TP-Link router directory traversal allows unauthenticated file readA path traversal flaw in the web interface of multiple TP-Link Archer and TL-WR/WDR router models lets a remote attacker read arbitrary files by plac…KEVEPSS 84%analysed6.5CVE-2023-50224TP-Link router httpd authentication bypass exposes stored credentialsThe httpd service on affected TP-Link router firmware contains an improper authentication flaw (CWE-290) that lets a network-adjacent attacker bypass…KEVEPSS 16%analysed9.8CVE-2013-4654Tp-link tl-wdr4300 firmware path traversal vulnerabilitySymlink Traversal vulnerability in TP-LINK TL-WDR4300 and TL-1043ND..EPSS 2.7%8.8CVE-2019-6487Tp-link tl-wdr5620 firmware os command injection vulnerabilityTP-Link WDR Series devices through firmware v3 (such as TL-WDR5620 V3.0) are affected by command injection (after login) leading to remote code execu…EPSS 8.5%5.0CVE-2014-4728Tp-link tl-wdr4300 firmware vulnerabilityThe web server in the TP-LINK N750 Wireless Dual Band Gigabit Router (TL-WDR4300) with firmware before 140916 allows remote attackers to cause a deni…EPSS 1.8%4.3CVE-2014-4727Tp-link tl-wdr4300 firmware cross-site scripting vulnerabilityCross-site scripting (XSS) vulnerability in the DHCP clients page in the TP-LINK N750 Wireless Dual Band Gigabit Router (TL-WDR4300) with firmware be…EPSS 2.0%9.4CVE-2025-62593Ray browser-based RCE via insufficient User-Agent guardRay, an AI compute engine, contains a critical remote code execution flaw before version 2.52.0. Its defense against browser-based attacks relies on …KEVEPSS 62%analysed8.1CVE-2008-4128Cisco IOS HTTP Administration CSRF allows arbitrary command executionThe HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router is vulnerable to multiple cross-site request forgery flaws.…KEVEPSS 34%analysed
Source: NIST National Vulnerability Database (record CVE-2013-4848), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.
