Design/Logic Flaw

2023-09-0610:15:00

PRIOn knowledge base

www.prio-n.com

deco m4

firmware

os command execution

authenticated attacker

7.9 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.8%

JSON

Deco M4 firmware versions prior to ‘Deco M4(JP)_V2_1.5.8 Build 20230619’ allows a network-adjacent authenticated attacker to execute arbitrary OS commands.

CPENameOperatorVersion
deco_m4_firmwarelt1.5.8

CPE	Name	Operator	Version
	deco_m4_firmware	lt	1.5.8

References

jvn.jp/en/vu/JVNVU99392903/

www.tp-link.com/jp/support/download/deco-m4/v2/