CVE-2021-44827

CVE-2021-44827 A PoC for CVE-2021-44827 - authenticated remote code execution in Tp-link Archer C20i Write-up: https://full-disclosure.eu/reports/2022/CVE-2021-44827-tplink-authenticated-remote-code-execution.html Example $ python exploit.py error0 error0 Run postexploitcmd Trying 192.168.0.1...

TP-Link Archer C20i Command Injection (CVE-2021-44827)

A command injection vulnerability exists in TP-Link Archer C20i. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

TP-Link AC1750 Archer C20i Router Code Execution

The vulnerability of the web interface configuration of TP-Link AC1750 Archer C20i software lies in the lack of measures taken to neutralize special elements used in the operating system’s processing of the XTPExternalIPv6Address parameter. Exploiting this vulnerability allows a malicious actor t...

CVE-2021-44827

There is remote authenticated OS command injection on TP-Link Archer C20i 0.9.1 3.2 v003a.0 Build 170221 Rel.55462n devices vie the XTPExternalIPv6Address HTTP parameter, allowing a remote attacker to run arbitrary commands on the router with root privileges...

CVE-2021-44827

There is remote authenticated OS command injection on TP-Link Archer C20i 0.9.1 3.2 v003a.0 Build 170221 Rel.55462n devices vie the XTPExternalIPv6Address HTTP parameter, allowing a remote attacker to run arbitrary commands on the router with root privileges...

CVE-2021-44827

There is remote authenticated OS command injection on TP-Link Archer C20i 0.9.1 3.2 v003a.0 Build 170221 Rel.55462n devices vie the XTPExternalIPv6Address HTTP parameter, allowing a remote attacker to run arbitrary commands on the router with root privileges...

Command injection

There is remote authenticated OS command injection on TP-Link Archer C20i 0.9.1 3.2 v003a.0 Build 170221 Rel.55462n devices vie the XTPExternalIPv6Address HTTP parameter, allowing a remote attacker to run arbitrary commands on the router with root privileges...

CVE-2021-44827

CVE-2021-44827 affects TP-Link Archer C20i (firmware 0.9.1 3.2 v003a.0 Build 170221 Rel.55462n). It enables remote authenticated OS command injection via the HTTP parameter X_TP_ExternalIPv6Address, allowing execution of arbitrary commands with root privileges. Affected device exposed over networ...

CVE-2021-44827

There is remote authenticated OS command injection on TP-Link Archer C20i 0.9.1 3.2 v003a.0 Build 170221 Rel.55462n devices vie the XTPExternalIPv6Address HTTP parameter, allowing a remote attacker to run arbitrary commands on the router with root privileges...

CVE-2021-44827: Improper Neutralization of Special Elements used in an OS Command

There is remote authenticated OS command injection on TP-Link Archer C20i 0.9.1 3.2 v003a.0 Build 170221 Rel.55462n devices vie the XTPExternalIPv6Address HTTP parameter, allowing a remote attacker to run arbitrary commands on the router with root privileges...

Exploit for OS Command Injection in Tp-Link Archer_C20I_Firmware

CVE-2021-44827 A PoC for CVE-2021-44827 - authenticated remote...

PT-2021-6396

Name of the Vulnerable Software and Affected Versions TP-Link Archer C20i version 0.9.1 3.2 v003a.0 Build 170221 Rel.55462n Description The issue concerns a remote authenticated OS command injection, allowing a remote attacker to run arbitrary commands on the router with root privileges. This is...

Multiple vulnerabilities in several TP-Link routers

The TP-LINK Archer C20i/C2 is a router from China P&L. A denial of service, security bypass, and command injection vulnerability exists in multiple TP-Link routers. An attacker could use this vulnerability to bypass some security restrictions to perform unauthorized operations, cause a denial of...