CVE-2019-6487: Improper Neutralization of Special Elements used in an OS Command

TP-Link WDR Series devices through firmware v3 such as TL-WDR5620 V3.0 are affected by command injection after login leading to remote code execution, because shell metacharacters can be included in the weather getweatherobserve citycode field...

PT-2019-18112

Name of the Vulnerable Software and Affected Versions TP-Link WDR Series devices through firmware v3 Description The issue affects devices after login, allowing command injection that leads to remote code execution. This is possible because shell metacharacters can be included in the citycode fie...