Deviceways

Wireless access point

TP-LINK TL-WA1201

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
v2
Get OpenWrt firmware Release listed · 25.12.6
v2
Open hardware record Release listed · 25.12.5
Original project github.com

Recorded configuration: 16 MB flash; 128 MB RAM

Limitations
wifi dfs channels (52+)
First installation
GUI OEM
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

tp-link tl-wa1201 v2 — device documentation (github.com)TP-LINK TL-WA1201 v2 — TechInfoDepot (github.com)Device details — v2 — Source documentation (openwrt.org)

Hardware revision
v2

OpenWrt · v2

OpenWrt · v2 — v2 — Source documentation (openwrt.org)

Installation routes recorded
GUI OEM
Recovery routes recorded
U-Boot TFTP + serial recovery
Availability recorded by source
Available 2023

Hardware details

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

CVSS 8.8 (v3.0)

TL-WA1201

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link TL-WA1201 1.0.1 Build 20200709 rel.66244(5553) wireless access points

CVE-2021-35004

Affected firmware
1.0.1 Build 20200709 rel.66244(5553)
Fix
Fix details in the linked record
Read zdi CVE record
Details and sources
CVE updated

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link TL-WA1201 1.0.1 Build 20200709 rel.66244(5553) wireless access points. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of DNS responses. A crafted DNS message can trigger an overflow of a fixed-length, stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-14656.

Security advisory ZDI 22 081 — TL-WA1201 (zerodayinitiative.com) ↗
Check more security advisories for this device · CVE.org