TP-Link Archer C20i Command Injection (CVE-2021-44827)

A command injection vulnerability exists in TP-Link Archer C20i. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2021-44827

There is remote authenticated OS command injection on TP-Link Archer C20i 0.9.1 3.2 v003a.0 Build 170221 Rel.55462n devices vie the XTPExternalIPv6Address HTTP parameter, allowing a remote attacker to run arbitrary commands on the router with root privileges...

CVE-2021-44827

CVE-2021-44827 affects TP-Link Archer C20i (firmware 0.9.1 3.2 v003a.0 Build 170221 Rel.55462n). It enables remote authenticated OS command injection via the HTTP parameter X_TP_ExternalIPv6Address, allowing execution of arbitrary commands with root privileges. Affected device exposed over networ...

CVE-2021-44827

creationtimestamp| type| source ---|---|--- 2021-12-13 11:20:57+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1013 2021-12-13 17:07:01+00:00| published-proof-of-concept| https://t.me/BlueRedTeam/1386 2022-03-05 00:27:15+00:00| seen| https://t.me/cibsecurity/38477...

Exploit for OS Command Injection in Tp-Link Archer_C20I_Firmware

CVE-2021-44827 A PoC for CVE-2021-44827 - authenticated remote...