CVE-2023-40193

2023-09-0609:22:00

jpcert

www.cve.org

deco m4

firmware

vulnerability

remote command execution

network-adjacent

authenticated attacker

os commands

8.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.8%

JSON

Deco M4 firmware versions prior to ‘Deco M4(JP)_V2_1.5.8 Build 20230619’ allows a network-adjacent authenticated attacker to execute arbitrary OS commands.

CNA Affected

[
  {
    "vendor": "TP-LINK",
    "product": "Deco M4",
    "versions": [
      {
        "version": "firmware versions prior to 'Deco M4(JP)_V2_1.5.8 Build 20230619'",
        "status": "affected"
      }
    ]
  }
]