LongBow

Archer TP-Link VR1600V 路由器本地远程命令执行漏洞利用（CVE-2023-31756） 概述 此 Python 脚本演示了 Archer TP-Link VR1600V V1/V2 路由器中的一个本地远程命令执行漏洞。该漏洞利用程序可获取路由器操作系统级别的管理员访问权限。借助此访问权限，您可以重新启用 OpenVPN 服务器，以及禁用 CWMP 和其他在 Web 门户中被限制的管理任务。 前提条件 在使用此脚本之前，请确保满足以下前提条件： 您的系统已安装 Python 3.x。 拥有 Archer TP-Link V1/V2...

CVE-2023-31756

A command injection vulnerability exists in the administrative web portal in TP-Link Archer VR1600V devices running firmware Versions = 0.1.0. 0.9.1 v5006.0 Build 220518 Rel.32480n which allows remote attackers, authenticated to the administrative web portal as an administrator user to open an...

CVE-2023-31756

creationtimestamp| type| source ---|---|--- 2023-05-19 16:43:13+00:00| seen| https://t.me/cibsecurity/64458...

CVE-2023-31756

A command injection vulnerability exists in the administrative web portal in TP-Link Archer VR1600V devices running firmware Versions = 0.1.0. 0.9.1 v5006.0 Build 220518 Rel.32480n which allows remote attackers, authenticated to the administrative web portal as an administrator user to open an...

CVE-2023-31756

CVE-2023-31756 affects TP-Link Archer VR1600V, where the administrative web portal is vulnerable to command injection via the X_TP_IfName parameter. Affected devices include Archer VR1600V with firmware versions