Lucene search
HistorySep 12, 2022 - 6:15 p.m.
CVE-2022-37860
tp-link
m7350 v3
web config
interface
pre-authentication
command injection
cve-2022-37860
nvd
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.7 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
54.6%
The web configuration interface of the TP-Link M7350 V3 with firmware version 190531 is affected by a pre-authentication command injection vulnerability.
Affected configurations
Node
tp-linkm7350_firmwareMatch190531
tp-linkm7350Matchv3
| CPE | Name | Operator | Version |
|---|---|---|---|
| tp-link:m7350_firmware | tp-link m7350 firmware | eq | 190531 |
References
Social References
More
Related
cvelist
cvelist
CVE-2022-37860
2022-09-12 17:06:10
prion
prion
Command injection
2022-09-12 18:15:00
nvd
nvd
CVE-2022-37860
2022-09-12 18:15:09
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.7 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
54.6%
Related for CVE-2022-37860