CVE-2023-43137

TPLINK TL-ER5120G 4.0 2.0.0 Build 210817 Rel.80868n has a command injection vulnerability, when an attacker adds ACL rules after authentication, and the rule name parameter has injection points...

CVE-2023-43137

Summary : CVE-2023-43137 affects TP-LINK TL-ER5120G (firmware 4.0 2.0.0 Build 210817 Rel.80868n). The issue is a command injection in the router’s ACL handling: when an attacker adds ACL rules after authentication, the rule name parameter contains injection points that can lead to arbitrary comma...