Lucene search
PRIOn knowledge basePRION:CVE-2023-36498HistoryFeb 06, 2024 - 5:15 p.m.
Command injection
2024-02-0617:15:00
PRIOn knowledge base
www.prio-n.com
6
pptp client
http request
arbitrary command injection
authenticated request
unrestricted shell
nvd
A post-authentication command injection vulnerability exists in the PPTP client functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an authenticated HTTP request to trigger this vulnerability and gain access to an unrestricted shell.
| CPE | Name | Operator | Version |
|---|---|---|---|
| er7206_firmware | eq | 1.3.0 build20230322rel70591 |
Related
talos
talos
cvelist
cvelist
CVE-2023-36498
2024-02-06 16:20:15
nvd
nvd
CVE-2023-36498
2024-02-06 17:15:08
cve
cve
CVE-2023-36498
2024-02-06 17:15:08
talosblog
talosblog
Multiple vulnerabilities in TP-Link Omada system could lead to root access
2024-06-26 16:00:24