What’s Vulnerable › Vulnerabilities
CVE-2020-14965
- Severity: medium (CVSS 4.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.6% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2020-06-23 · updated 2026-06-17
- Weakness: CWE-79
Description
On TP-Link TL-WR740N v4 and TL-WR740ND v4 devices, an attacker with access to the admin panel can inject HTML code and change the HTML context of the target pages and stations in the access-control settings via targets_lists_name or hosts_lists_name. The vulnerability can also be exploited through a CSRF, requiring no authentication as an administrator.
Affected products
- TP-Link TL-WR740N: all versions
- TP-Link Tl-Wr740Nd Firmware: all versions
References
Get alerted when CVE-2020-14965 or the next vulnerability affects your stack