Lucene search
PRIOn knowledge basePRION:CVE-2019-6487HistoryJan 18, 2019 - 10:29 a.m.
Command injection
2019-01-1810:29:00
PRIOn knowledge base
www.prio-n.com
3
TP-Link WDR Series devices through firmware v3 (such as TL-WDR5620 V3.0) are affected by command injection (after login) leading to remote code execution, because shell metacharacters can be included in the weather get_weather_observe citycode field.
| CPE | Name | Operator | Version |
|---|---|---|---|
| tl-wdr3500_firmware | le | 3.0 | |
| tl-wdr3600_firmware | le | 3.0 | |
| tl-wdr4300_firmware | le | 3.0 | |
| tl-wdr4900_firmware | le | 3.0 | |
| tl-wdr5620_firmware | le | 3.0 |
Related
cvelist
cvelist
CVE-2019-6487
2022-10-03 16:19:25
cve
cve
CVE-2019-6487
2022-10-03 16:19:25
nvd
nvd
CVE-2019-6487
2019-01-18 10:29:00