TP-Link TL-WR902AC devices through V3 0.9.1 allow remote authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS) by uploading a crafted firmware update because the signature check is inadequate.
CPE | Name | Operator | Version |
---|---|---|---|
tl-wr902ac_firmware | le | 3.0.9.1 |