← Vulnerability feed

Vulnerability record · CVE-2021-3275 · published 26 March 2021

CVE-2021-3275: Tp-link td-w9977 firmware cross-site scripting vulnerability

Tp Link · Td W9977 Firmware

Unauthenticated stored cross-site scripting (XSS) exists in multiple TP-Link products including WIFI Routers (Wireless AC routers), Access Points, ADSL + DSL Gateways and Routers, which affects TD-W9977v1, TL-WA801NDv5, TL-WA801Nv6, TL-WA802Nv5, and Archer C3150v2 devices through the improper validation of the hostname. Some of the pages including dhcp.htm, networkMap.htm, dhcpClient.htm, qsEdit.htm, and qsReview.htm and use this vulnerable hostname function (setDefaultHostname()) without sanitization.

6.1 CVSS 3.1 Medium EPSS 1.8% · top 22.5% CWE-79 · Cross-site scripting
6.1CVSS 3.1 base score, v2 4.3
1.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
5Affected product versions listed by NVD
8References, 6 tagged exploit
17 Jun 2026Last modified by NVD

Description

Unauthenticated stored cross-site scripting (XSS) exists in multiple TP-Link products including WIFI Routers (Wireless AC routers), Access Points, ADSL + DSL Gateways and Routers, which affects TD-W9977v1, TL-WA801NDv5, TL-WA801Nv6, TL-WA802Nv5, and Archer C3150v2 devices through the improper validation of the hostname. Some of the pages including dhcp.htm, networkMap.htm, dhcpClient.htm, qsEdit.htm, and qsReview.htm and use this vulnerable hostname function (setDefaultHostname()) without sanitization.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected products

5 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://packetstormsecurity.com/files/161989/TP-Link-Cross-Site-Scripting.html ExploitThird Party AdvisoryVDB Entry
https://github.com/smriti548/CVE/blob/main/CVE-2021-3275 ExploitThird Party Advisory
https://seclists.org/fulldisclosure/2021/Mar/67 ExploitMailing ListThird Party Advisory
https://www.tp-link.com Vendor Advisory
http://packetstormsecurity.com/files/161989/TP-Link-Cross-Site-Scripting.html ExploitThird Party AdvisoryVDB Entry
https://github.com/smriti548/CVE/blob/main/CVE-2021-3275 ExploitThird Party Advisory
https://seclists.org/fulldisclosure/2021/Mar/67 ExploitMailing ListThird Party Advisory
https://www.tp-link.com Vendor Advisory

Track CVE-2021-3275 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2023-36489Tp-link tl-wr902ac firmware os command injection vulnerabilityMultiple TP-LINK products allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands. Affected products/versions are as follo…EPSS 0.56%8.8CVE-2022-46914Tp-link tl-wa801n firmware vulnerabilityAn issue in the firmware update process of TP-LINK TL-WA801N / TL-WA801ND V1 v3.12.16 and earlier allows attackers to execute arbitrary code or cause…EPSS 0.97%8.8CVE-2021-4144Tp-link tl-wr802n firmware os command injection vulnerabilityTP-Link wifi router TL-WR802N V4(JP), with firmware version prior to 211202, is vulnerable to OS command injection.EPSS 1.9%8.5CVE-2026-3227Tp-link tl-wr802n firmware os command injection vulnerabilityA command injection vulnerability was identified in TP-Link TL-WR802N v4, TL-WR841N v14, and TL-WR840N v6 due to improper neutralization of special e…EPSS 1.8%8.1CVE-2021-29302Tp-link tl-wr802n firmware classic buffer overflow vulnerabilityTP-Link TL-WR802N(US), Archer_C50v5_US v4_200 <= 2020.06 contains a buffer overflow vulnerability in the httpd process in the body message. The attac…EPSS 5.9%6.1CVE-2026-42897Microsoft Exchange Server XSS enables spoofingMicrosoft Exchange Server and Exchange Server Subscription Edition fail to neutralize input during web page generation, a cross-site scripting flaw (…KEVEPSS 0.52%analysed6.1CVE-2025-48700Zimbra Classic UI stored XSS via crafted email HTMLZimbra Collaboration Suite Classic UI fails to properly sanitize HTML content in email messages, allowing crafted tag structures and attribute values…KEVEPSS 1.7%analysed6.1CVE-2025-66376Zimbra Collaboration Classic UI stored XSS via CSS @import in emailZimbra Collaboration Suite 10 before 10.0.18 and 10.1 before 10.1.13 allows stored cross-site scripting in the Classic UI through CSS @import directi…KEVEPSS 20%analysed

Source: NIST National Vulnerability Database (record CVE-2021-3275), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.