2 matches found
Command injection
TP-Link WDR Series devices through firmware v3 such as TL-WDR5620 V3.0 are affected by command injection after login leading to remote code execution, because shell metacharacters can be included in the weather getweatherobserve citycode field...
6.5CVSS9.1AI score0.08518EPSS
SaveExploits1References1Affected Software5
CVE-2019-6487
TP-Link WDR Series devices through firmware v3 such as TL-WDR5620 V3.0 are affected by command injection after login leading to remote code execution, because shell metacharacters can be included in the weather getweatherobserve citycode field...
9.1AI score0.08518EPSS
SaveExploits1References1
20