10212 matches found
CVE-2023-37284
Improper authentication vulnerability in Archer C20 firmware versions prior to 'Archer C20JPV1230616' allows a network-adjacent unauthenticated attacker to execute an arbitrary OS command via a crafted request to bypass authentication...
CVE-2023-37284
CVE-2023-37284 affects TP-Link Archer C20 firmware prior to JP_V1_230616. The underlying issue is improper authentication, enabling a network-adjacent, unauthenticated attacker to execute arbitrary OS commands via a crafted request to bypass authentication. Affected product/versions: Archer C20 (...
CVE-2023-37284
Improper authentication vulnerability in Archer C20 firmware versions prior to 'Archer C20JPV1230616' allows a network-adjacent unauthenticated attacker to execute an arbitrary OS command via a crafted request to bypass authentication...
CVE-2023-38563
The CVE-2023-38563 entry concerns TP-LINK Archer C1200 and Archer C9 routers. Affected firmware versions prior to Archer C1200(JP)_V2_230508 and Archer C9(JP)_V3_230508 allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands. Practical impact is arbitrary commands execu...
CVE-2023-38588
Archer C3150 firmware versions prior to 'Archer C3150JPV2230511' allows a network-adjacent authenticated attacker to execute arbitrary OS commands...
CVE-2023-39224
Archer C5 firmware all versions and Archer C7 firmware versions prior to 'Archer C7JPV2230602' allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Note that Archer C5 is no longer supported, therefore the update for this product is not provided...
CVE-2023-39935
CVE-2023-39935 affects TP‑LINK Archer C5400 routers. Firmware versions prior to Archer C5400(JP)_V2_230506 are vulnerable to a network‑adjacent, authenticated attacker who can execute arbitrary OS commands due to an input/command handling flaw in the affected firmware. The issue enables remote co...
CVE-2023-39935
Archer C5400 firmware versions prior to 'Archer C5400JPV2230506' allows a network-adjacent authenticated attacker to execute arbitrary OS commands...
CVE-2023-40193
The CVE-2023-40193 entry concerns TP-LINK Deco M4 firmware. Affected: Deco M4 (JP) firmware prior to V2_1.5.8 Build 20230619. Impact: a network-adjacent authenticated attacker can execute arbitrary OS commands via the device, as described by the referenced sources. The vulnerability stems from im...
CVE-2023-40357
Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer AX50 firmware versions prior to 'Archer AX50JPV1230529', Archer A10 firmware versions prior to 'Archer A10JPV2230504', Archer AX10 firmware...
CVE-2023-40531
The CVE-2023-40531 issue affects TP-Link Archer AX6000 family firmware. A network-adjacent, authenticated attacker can execute arbitrary OS commands due to a vulnerability in versions prior to Archer AX6000(JP)_V1_1.3.0 Build 20221208. The exposure stems from how the router handles input in its a...
PT-2023-26513 · Tp Link · Archer C9 +1
Name of the Vulnerable Software and Affected Versions: Archer C1200 versions prior to Archer C1200JP V2 230508 Archer C9 versions prior to Archer C9JP V3 230508 Description: The issue allows a network-adjacent unauthenticated attacker to execute arbitrary OS commands. Recommendations: For Archer...
TP-LINK Archer C7 OS Command Injection Vulnerability
The TP-LINK Archer C7 is a wireless router from China P&L TP-LINK. A security vulnerability exists in firmware versions prior to TP-LINK Archer C7JPV2230602, and firmware versions prior to Archer C55JPV1230506, which stems from a vulnerability that could allow a network-adjacent authenticated...
PT-2023-27163 · Tp Link · Archer C5400
Name of the Vulnerable Software and Affected Versions: Archer C5400 versions prior to Archer C5400JP V2 230506 Description: The issue allows a network-adjacent authenticated attacker to execute arbitrary OS commands. Recommendations: For versions prior to Archer C5400JP V2 230506, update the...
TP-LINK Archer C1200 OS Command Injection Vulnerability
The TP-LINK Archer C1200 is a wireless router from China P&L TP-LINK. A security vulnerability exists in firmware versions prior to TP-LINK Archer C1200JPV2230508, Archer C9JPV3230508, and Archer C9JPV3230508, which stems from a vulnerability that could allow a network-adjacent authenticated...
TP-LINK Archer AX6000 OS Command Injection Vulnerability
The TP-LINK Archer is a series of routers from China P&L TP-LINK. A security vulnerability exists in firmware versions prior to TP-LINK Archer AX6000JPV11.3.0 Build 20221208, which stems from a vulnerability that allows network-adjacent authenticated attackers to execute arbitrary operating syste...
PT-2023-5597 · Tp Link · Archer A10 +2
Name of the Vulnerable Software and Affected Versions: Archer AX50 versions prior to Archer AX50JP V1 230529 Archer A10 versions prior to Archer A10JP V2 230504 Archer AX10 versions prior to Archer AX10JP V1.2 230508 Archer AX11000 versions prior to Archer AX11000JP V1 230523 Description: Multipl...
TP-LINK Archer C5400 OS Command Injection Vulnerability
The TP-LINK Archer is a series of routers from China P&L TP-LINK. A security vulnerability exists in versions prior to TP-LINK Archer C5400 V2230506, which stems from a vulnerability that allows network-adjacent authenticated attackers to execute arbitrary operating system commands...
PT-2023-5275 · Tp Link · Tp-Link Archer A10
Name of the Vulnerable Software and Affected Versions: TP-Link Archer A10 firmware versions prior to Archer A10JP V2 230504 Description: The issue exists due to the lack of measures to neutralize special elements used in the operating system command. This allows a network-adjacent unauthenticated...
