CVE-2023-38588

Archer C3150 firmware versions prior to 'Archer C3150JPV2230511' allows a network-adjacent authenticated attacker to execute arbitrary OS commands...

CVE-2023-39224

Archer C5 firmware all versions and Archer C7 firmware versions prior to 'Archer C7JPV2230602' allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Note that Archer C5 is no longer supported, therefore the update for this product is not provided...

CVE-2023-39935

CVE-2023-39935 affects TP‑LINK Archer C5400 routers. Firmware versions prior to Archer C5400(JP)_V2_230506 are vulnerable to a network‑adjacent, authenticated attacker who can execute arbitrary OS commands due to an input/command handling flaw in the affected firmware. The issue enables remote co...

CVE-2023-39935

Archer C5400 firmware versions prior to 'Archer C5400JPV2230506' allows a network-adjacent authenticated attacker to execute arbitrary OS commands...

CVE-2023-40193

The CVE-2023-40193 entry concerns TP-LINK Deco M4 firmware. Affected: Deco M4 (JP) firmware prior to V2_1.5.8 Build 20230619. Impact: a network-adjacent authenticated attacker can execute arbitrary OS commands via the device, as described by the referenced sources. The vulnerability stems from im...

CVE-2023-40357

Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer AX50 firmware versions prior to 'Archer AX50JPV1230529', Archer A10 firmware versions prior to 'Archer A10JPV2230504', Archer AX10 firmware...

CVE-2023-40531

The CVE-2023-40531 issue affects TP-Link Archer AX6000 family firmware. A network-adjacent, authenticated attacker can execute arbitrary OS commands due to a vulnerability in versions prior to Archer AX6000(JP)_V1_1.3.0 Build 20221208. The exposure stems from how the router handles input in its a...

PT-2023-26513 · Tp Link · Archer C9 +1

Name of the Vulnerable Software and Affected Versions: Archer C1200 versions prior to Archer C1200JP V2 230508 Archer C9 versions prior to Archer C9JP V3 230508 Description: The issue allows a network-adjacent unauthenticated attacker to execute arbitrary OS commands. Recommendations: For Archer...

TP-LINK Archer C7 OS Command Injection Vulnerability

The TP-LINK Archer C7 is a wireless router from China P&L TP-LINK. A security vulnerability exists in firmware versions prior to TP-LINK Archer C7JPV2230602, and firmware versions prior to Archer C55JPV1230506, which stems from a vulnerability that could allow a network-adjacent authenticated...

TP-LINK Archer AX6000 OS Command Injection Vulnerability

The TP-LINK Archer is a series of routers from China P&L TP-LINK. A security vulnerability exists in firmware versions prior to TP-LINK Archer AX6000JPV11.3.0 Build 20221208, which stems from a vulnerability that allows network-adjacent authenticated attackers to execute arbitrary operating syste...

PT-2023-27163 · Tp Link · Archer C5400

Name of the Vulnerable Software and Affected Versions: Archer C5400 versions prior to Archer C5400JP V2 230506 Description: The issue allows a network-adjacent authenticated attacker to execute arbitrary OS commands. Recommendations: For versions prior to Archer C5400JP V2 230506, update the...

TP-LINK Archer C1200 OS Command Injection Vulnerability

The TP-LINK Archer C1200 is a wireless router from China P&L TP-LINK. A security vulnerability exists in firmware versions prior to TP-LINK Archer C1200JPV2230508, Archer C9JPV3230508, and Archer C9JPV3230508, which stems from a vulnerability that could allow a network-adjacent authenticated...

TP-LINK Archer C5400 OS Command Injection Vulnerability

The TP-LINK Archer is a series of routers from China P&L TP-LINK. A security vulnerability exists in versions prior to TP-LINK Archer C5400 V2230506, which stems from a vulnerability that allows network-adjacent authenticated attackers to execute arbitrary operating system commands...

PT-2023-5275 · Tp Link · Tp-Link Archer A10

Name of the Vulnerable Software and Affected Versions: TP-Link Archer A10 firmware versions prior to Archer A10JP V2 230504 Description: The issue exists due to the lack of measures to neutralize special elements used in the operating system command. This allows a network-adjacent unauthenticated...

PT-2023-5597 · Tp Link · Archer A10 +2

Name of the Vulnerable Software and Affected Versions: Archer AX50 versions prior to Archer AX50JP V1 230529 Archer A10 versions prior to Archer A10JP V2 230504 Archer AX10 versions prior to Archer AX10JP V1.2 230508 Archer AX11000 versions prior to Archer AX11000JP V1 230523 Description: Multipl...

CVE-2023-3375

Unrestricted Upload of File with Dangerous Type vulnerability in Unisign Bookreen allows OS Command Injection.This issue affects Bookreen: before 3.0.0...

CVE-2023-3375

Unrestricted Upload of File with Dangerous Type vulnerability in Unisign Bookreen allows OS Command Injection. This issue affects Bookreen: before 3.0.0...

Design/Logic Flaw

Unrestricted Upload of File with Dangerous Type vulnerability in Unisign Bookreen allows OS Command Injection.This issue affects Bookreen: before 3.0.0...

CVE-2023-3375

CVE-2023-3375 concerns an OS command injection in Unisign Bookreen caused by an Unrestricted Upload of a File with a Dangerous Type. Affected product/version: Unisign Bookreen prior to 3.0.0. The underlying issue is the ability to upload files of dangerous type, enabling command execution on the ...

CVE-2023-3375 Unrestricted File Upload in Bookreen

Unrestricted Upload of File with Dangerous Type vulnerability in Unisign Bookreen allows OS Command Injection. This issue affects Bookreen: before 3.0.0...