CVE-2022-37860

The CVE-2022-37860 issue affects the TP-Link M7350 V3 web configuration interface (firmware version 190531). All connected documents describe a pre-authentication command injection vulnerability in the web UI, stemming from insufficient input/data handling at the management level. Impact stated a...

CVE-2022-37860

The web configuration interface of the TP-Link M7350 V3 with firmware version 190531 is affected by a pre-authentication command injection vulnerability...

PT-2022-4968 · Tp Link · Tp-Link M7350

Name of the Vulnerable Software and Affected Versions: TP-Link M7350 version 190531 Description: The web configuration interface of the TP-Link M7350 is affected by a pre-authentication command injection issue. This is related to the lack of data cleaning measures at the management level...

The vulnerability of TP-Link M7350 router’s microprogramming software, related to the lack of data cleaning measures at the control level, allows attackers to execute arbitrary commands.

The vulnerability of TP-Link M7350 router’s microprogramming software is related to the lack of measures taken for data cleaning at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands until authentication is completed...

The vulnerability of the “Service Name” parameter in the TP-Link M7350 route blocker software exists because measures to neutralize special elements used in the operating system are not taken. This allows a hacker to execute arbitrary commands.

The vulnerability of the “Service Name” parameter in the TP-Link M7350 route switch software exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the External Port component of the TP-Link M7350 microprogramming system’s route blocker lies in its lack of measures to neutralize special elements used in the operating system commands. This allows a hacker to execute arbitrary commands.

The vulnerability of the External Port component of the TP-Link M7350 microprogramming system controller exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

The vulnerability of the NAT Port Mapping Protocol implementation in the TP-Link M7350 router’s microprogramming software arises from the failure to take measures to eliminate special elements used in the operating system commands. This vulnerability allows a perpetrator to execute arbitrary commands.

The vulnerability of the NAT Port Mapping Protocol NAT-PMP implementation of TP-Link’s M7350 router software exists due to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

The vulnerability of the Port Triggering function in TP-Link M7350 microprogramming devices arises from the lack of measures to neutralize special elements used in the operating system’s commands. This allows attackers to execute arbitrary commands.

The vulnerability of the Port Triggering function in TP-Link’s M7350 route switch software exists because measures to neutralize the special elements used in the operating system commands are not taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

TP-Link M7350 triggerPort OS Command Injection Vulnerability (CNVD-2019-40070)

The TP-Link M7350 is a 4G LTE mobile Wi-Fi router. TP-Link M7350 1.0.16 and earlier versions suffer from internalPort OS command injection vulnerability. An attacker can exploit this vulnerability to execute illegal OS commands...

TP-Link M7350 triggerPort OS Command Injection Vulnerability (CNVD-2019-40071)

The TP-Link M7350 is a 4G LTE mobile Wi-Fi router. TP-Link M7350 1.0.16 and earlier versions suffer from an externalPort OS command injection vulnerability. An attacker can exploit this vulnerability to execute illegal OS commands...

TP-Link M7350 triggerPort OS Command Injection Vulnerability

The TP-Link M7350 is a 4G LTE mobile Wi-Fi router. A triggerPort OS command injection vulnerability exists in TP-Link M7350 1.0.16 and earlier versions. An attacker can exploit this vulnerability to execute illegal OS commands...

TP-Link M7350 triggerPort OS Command Injection Vulnerability (CNVD-2019-40068)

The TP-Link M7350 is a 4G LTE mobile Wi-Fi router. A serviceName OS command injection vulnerability exists in TP-Link M7350 1.0.16 and earlier versions. An attacker can exploit this vulnerability to execute illegal OS commands...

TP-Link M7350 triggerPort OS Command Injection Vulnerability (CNVD-2019-40069)

The TP-Link M7350 is a 4G LTE mobile Wi-Fi router. A portMappingProtocol OS command injection vulnerability exists in TP-Link M7350 1.0.16 and earlier versions. An attacker can exploit this vulnerability to execute illegal OS commands...

CVE-2019-13651

TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow portMappingProtocol OS Command Injection issue 3 of 5...

CVE-2019-13652

TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow serviceName OS Command Injection issue 4 of 5...

CVE-2019-13650

TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow internalPort OS Command Injection issue 2 of 5...

CVE-2019-13649

TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow externalPort OS Command Injection issue 1 of 5...

CVE-2019-13653

TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow triggerPort OS Command Injection issue 5 of 5...

CVE-2019-13651

TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow portMappingProtocol OS Command Injection issue 3 of 5...

CVE-2019-13652

TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow serviceName OS Command Injection issue 4 of 5...