CVE-2023-47209

🗓️ 06 Feb 2024 16:20:14Reported by talosType

Post-auth command injection in Tp-Link ER7206 Omada Gigabit VPN Router

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2023-47209	6 Feb 202418:26	–	circl
CNNVD	TP-LINK ER7206 操作系统命令注入漏洞	6 Feb 202400:00	–	cnnvd
CNVD	TP-LINK ER7206 OS Command Injection Vulnerability (CNVD-2024-13527)	26 Feb 202400:00	–	cnvd
Cvelist	CVE-2023-47209	6 Feb 202416:20	–	cvelist
EUVD	EUVD-2023-51341	3 Oct 202520:07	–	euvd
NVD	CVE-2023-47209	6 Feb 202417:15	–	nvd
Prion	Command injection	6 Feb 202417:15	–	prion
RedhatCVE	CVE-2023-47209	23 May 202502:00	–	redhatcve
Talos	TP-Link ER7206 Omada Gigabit VPN Router uhttpd ipsec command injection vulnerability	6 Feb 202400:00	–	talos
Talos Blog	Multiple vulnerabilities in TP-Link Omada system could lead to root access	26 Jun 202416:00	–	talosblog

NVD

Vulners

Node

tp-link er7206_firmwareMatch1.3.0build_20230322_rel_70591

AND

tp-link er7206Match-

[
  {
    "vendor": "Tp-Link",
    "product": "ER7206 Omada Gigabit VPN Router",
    "versions": [
      {
        "version": "1.3.0 build 20230322 Rel.70591",
        "status": "affected"
      }
    ]
  }
]

Source	Link
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2023-1854
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2023-1854

04 Nov 2025 19:16Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.2

EPSS0.00781

SSVC

CWE-78