5 matches found
EUVD-2023-30866
Malicious code in bioql PyPI...
CVE-2023-27078
A command injection issue was found in TP-Link MR3020 v.1150921 that allows a remote attacker to execute arbitrary commands via a crafted request to the tftp endpoint...
Command injection
A command injection issue was found in TP-Link MR3020 v.1150921 that allows a remote attacker to execute arbitrary commands via a crafted request to the tftp endpoint...
CVE-2023-27078
CVE-2023-27078 affects TP-Link MR3020 v1_150921, where a vulnerability in the tftp endpoint allows remote command execution due to insufficient input validation. The root cause is a lack of data cleaning at the management level, enabling arbitrary commands to be run by an unauthenticated remote a...
PT-2023-1973 · Tp Link · Tp-Link Mr3020
Name of the Vulnerable Software and Affected Versions: TP-Link MR3020 version 1 150921 Description: A command injection issue allows a remote attacker to execute arbitrary commands via a crafted request to the "tftp endpoint". This issue is related to the lack of data cleaning measures at the...