CVE-2023-43138

TPLINK TL-ER5120G 4.0 2.0.0 Build 210817 Rel.80868n has a command injection vulnerability, when an attacker adds NAPT rules after authentication, and the rule name has an injection point...

CVE-2023-43138

TPLINK TL-ER5120G 4.0 2.0.0 Build 210817 Rel.80868n has a command injection vulnerability, when an attacker adds NAPT rules after authentication, and the rule name has an injection point...

CVE-2023-43138

The advisory for CVE-2023-43138 covers TP-LINK TL-ER5120G (firmware 4.0 2.0.0 Build 210817 Rel.80868n). The vulnerability is a command injection occurring when an attacker, after authentication, adds NAPT rules and provides an injection-point in the rule name. Practical impact is high confidentia...