TP-Link WDR Series Command Injection Vulnerability

TP-Link WDR Series is a WDR series wireless router from China P&L TP-LINK. A command injection vulnerability exists in TP-Link WDR Series using v3 firmware e.g., TL-WDR5620 version V3.0, which stems from the inclusion of the sehll metacharacter in the 'citycode' field. A remote attacker could...

CVE-2019-6487

TP-Link WDR Series devices through firmware v3 such as TL-WDR5620 V3.0 are affected by command injection after login leading to remote code execution, because shell metacharacters can be included in the weather getweatherobserve citycode field...

Command injection

TP-Link WDR Series devices through firmware v3 such as TL-WDR5620 V3.0 are affected by command injection after login leading to remote code execution, because shell metacharacters can be included in the weather getweatherobserve citycode field...

CVE-2019-6487

TP-Link WDR Series devices through firmware v3 such as TL-WDR5620 V3.0 are affected by command injection after login leading to remote code execution, because shell metacharacters can be included in the weather getweatherobserve citycode field...

PT-2019-18112

Name of the Vulnerable Software and Affected Versions TP-Link WDR Series devices through firmware v3 Description The issue affects devices after login, allowing command injection that leads to remote code execution. This is possible because shell metacharacters can be included in the citycode fie...