CVE-2023-38568

Archer A10 firmware versions prior to 'Archer A10JPV2230504' allows a network-adjacent unauthenticated attacker to execute arbitrary OS commands...

CVE-2023-40357

Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer AX50 firmware versions prior to 'Archer AX50JPV1230529', Archer A10 firmware versions prior to 'Archer A10JPV2230504', Archer AX10 firmware...

Design/Logic Flaw

Archer A10 firmware versions prior to 'Archer A10JPV2230504' allows a network-adjacent unauthenticated attacker to execute arbitrary OS commands...

Design/Logic Flaw

Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer AX50 firmware versions prior to 'Archer AX50JPV1230529', Archer A10 firmware versions prior to 'Archer A10JPV2230504', Archer AX10 firmware...

CVE-2023-38568

Archer A10 firmware versions prior to 'Archer A10JPV2230504' allows a network-adjacent unauthenticated attacker to execute arbitrary OS commands...

CVE-2023-38568

Archer A10 firmware versions prior to 'Archer A10JPV2230504' allows a network-adjacent unauthenticated attacker to execute arbitrary OS commands...

CVE-2023-38568

CVE-2023-38568 affects TP-Link Archer A10 firmware prior to Archer A10(JP)_V2_230504. The issue arises from insufficient neutralization of special elements used in the OS command, enabling a network-adjacent, unauthenticated attacker to execute arbitrary OS commands. The vulnerability is classifi...

CVE-2023-40357

Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer AX50 firmware versions prior to 'Archer AX50JPV1230529', Archer A10 firmware versions prior to 'Archer A10JPV2230504', Archer AX10 firmware...

CVE-2023-40357

Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer AX50 firmware versions prior to 'Archer AX50JPV1230529', Archer A10 firmware versions prior to 'Archer A10JPV2230504', Archer AX10 firmware...

CVE-2023-40357

CVE-2023-40357 affects multiple TP-LINK routers (Archer AX50, A10, AX10, AX11000). The issue stems from improper filtration of command-related characters, allowing a network-adjacent authenticated attacker to execute arbitrary OS commands via the device. Affected firmware versions are: Archer AX5...

TP-LINK Archer 操作系统命令注入漏洞

The TP-LINK Archer is a series of routers from China P&L TP-LINK. A command execution vulnerability exists in firmware versions prior to TP-LINK Archer AX50JPV1230529, Archer A10JPV2230504, which stems from an application failing to correctly filter constructed command special characters, command...

PT-2023-5597 · Tp Link · Archer A10 +2

Name of the Vulnerable Software and Affected Versions: Archer AX50 versions prior to Archer AX50JP V1 230529 Archer A10 versions prior to Archer A10JP V2 230504 Archer AX10 versions prior to Archer AX10JP V1.2 230508 Archer AX11000 versions prior to Archer AX11000JP V1 230523 Description: Multipl...

TP-LINK Archer A10 OS Command Injection Vulnerability

The TP-LINK Archer is a series of routers from China P&L TP-LINK. A security vulnerability exists in previous firmware versions of the TP-LINK Archer A10JPV2230504, which stems from a vulnerability that allows network-adjacent, unauthenticated attackers to execute arbitrary operating system...

PT-2023-5275 · Tp Link · Tp-Link Archer A10

Name of the Vulnerable Software and Affected Versions: TP-Link Archer A10 firmware versions prior to Archer A10JP V2 230504 Description: The issue exists due to the lack of measures to neutralize special elements used in the operating system command. This allows a network-adjacent unauthenticated...

CVE-2022-36602

InnoSilicon A10 a1020200924120556 was discovered to contain a remote code execution RCE vulnerability in the setPlatformAPI function...

CVE-2022-36602

InnoSilicon A10 a1020200924120556 was discovered to contain a remote code execution RCE vulnerability in the setPlatformAPI function...

Remote code execution

InnoSilicon A10 a1020200924120556 was discovered to contain a remote code execution RCE vulnerability in the setPlatformAPI function...

CVE-2022-36602

InnoSilicon A10 a1020200924120556 was discovered to contain a remote code execution RCE vulnerability in the setPlatformAPI function...

CVE-2022-36602

The CVE-2022-36602 entry concerns InnoSilicon A10, specifically the a10_20200924_120556 build, which contains a remote code execution (RCE) vulnerability in the setPlatformAPI function. The issue enables an attacker to achieve code execution remotely, as indicated by the vulnerability description...

PT-2022-23498 · Innosilicon · Innosilicon A10

Name of the Vulnerable Software and Affected Versions: InnoSilicon A10 version a10 20200924 120556 Description: A remote code execution issue was found in the setPlatformAPI function, allowing for potential exploitation. Recommendations: For InnoSilicon A10 version a10 20200924 120556, as a...