Lucene search
PRIOn knowledge basePRION:CVE-2023-46683HistoryFeb 06, 2024 - 5:15 p.m.
Command injection
2024-02-0617:15:00
PRIOn knowledge base
www.prio-n.com
6
command injection
post-authentication
tp-link er7206
wireguard vpn
vulnerability
http request
authentication
A post authentication command injection vulnerability exists when configuring the wireguard VPN functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection . An attacker can make an authenticated HTTP request to trigger this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| er7206_firmware | eq | 1.3.0 build20230322rel70591 |
Related
cvelist
cvelist
CVE-2023-46683
2024-02-06 16:20:13
nvd
nvd
CVE-2023-46683
2024-02-06 17:15:09
cve
cve
CVE-2023-46683
2024-02-06 17:15:09
talos
talos
talosblog
talosblog
Multiple vulnerabilities in TP-Link Omada system could lead to root access
2024-06-26 16:00:24