CVE-2023-31188

Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer C50 firmware versions prior to 'Archer C50JPV3230505', Archer C55 firmware versions prior to 'Archer C55JPV1230506', and Archer C20 firmwar...

CVE-2023-31188

Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer C50 firmware versions prior to 'Archer C50JPV3230505', Archer C55 firmware versions prior to 'Archer C55JPV1230506', and Archer C20 firmwar...

Design/Logic Flaw

Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer AX50 firmware versions prior to 'Archer AX50JPV1230529', Archer A10 firmware versions prior to 'Archer A10JPV2230504', Archer AX10 firmware...

Design/Logic Flaw

Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer C50 firmware versions prior to 'Archer C50JPV3230505', Archer C55 firmware versions prior to 'Archer C55JPV1230506', and Archer C20 firmwar...

Design/Logic Flaw

Multiple TP-LINK products allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: TL-WR802N firmware versions prior to 'TL-WR802NJPV4221008', TL-WR841N firmware versions prior to 'TL-WR841NJPV14230506', and TL-WR902AC firmware...

CVE-2023-36489

Multiple TP-LINK products allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: TL-WR802N firmware versions prior to 'TL-WR802NJPV4221008', TL-WR841N firmware versions prior to 'TL-WR841NJPV14230506', and TL-WR902AC firmware...

CVE-2023-36489

TP-LINK TL-WR802N, TL-WR841N, and TL-WR902AC are affected by a network-adjacent, unauthenticated command-injection vulnerability. The issue affects TL-WR802N firmware before JP_V4_221008, TL-WR841N firmware before JP_V14_230506, and TL-WR902AC firmware before JP_V3_230506. Public disclosures cons...

CVE-2023-36489

Multiple TP-LINK products allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: TL-WR802N firmware versions prior to 'TL-WR802NJPV4221008', TL-WR841N firmware versions prior to 'TL-WR841NJPV14230506', and TL-WR902AC firmware...

CVE-2023-31188

Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer C50 firmware versions prior to 'Archer C50JPV3230505', Archer C55 firmware versions prior to 'Archer C55JPV1230506', and Archer C20 firmwar...

CVE-2023-31188

CVE-2023-31188 affects TP-LINK Archer C50, Archer C55, and Archer C20 JP firmware. The root cause is a failure to neutralize special elements in the OS command path, allowing a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected firmwares include Archer C50(JP)_V3_2...

CVE-2023-40357

Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer AX50 firmware versions prior to 'Archer AX50JPV1230529', Archer A10 firmware versions prior to 'Archer A10JPV2230504', Archer AX10 firmware...

CVE-2023-40357

Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer AX50 firmware versions prior to 'Archer AX50JPV1230529', Archer A10 firmware versions prior to 'Archer A10JPV2230504', Archer AX10 firmware...

CVE-2023-40357

CVE-2023-40357 affects multiple TP-LINK routers (Archer AX50, A10, AX10, AX11000). The issue stems from improper filtration of command-related characters, allowing a network-adjacent authenticated attacker to execute arbitrary OS commands via the device. Affected firmware versions are: Archer AX5...

TP-LINK Archer C50 OS Command Injection Vulnerability

TP-LINK Archer C50 is a wireless router from China P&L TP-LINK. An operating system command injection vulnerability exists in firmware versions prior to TP-LINK Archer C50JPV3230505, Archer C55JPV1230506, and Archer C20JP V1230616, which stems from a vulnerability that allows network-adjacent...

TP-LINK Operating System Command Injection Vulnerability in Multiple Products

TP-LINK TL-WR841N and others are products of China P&L TP-LINK.TP-LINK TL-WR841N is a wireless router.TP-LINK TL-WR802N is a wireless router.TP-LINK TL-WR902AC is an Ac750 Travel Router. A security vulnerability exists in multiple TP-LINK products that originates from a vulnerability that allows...

TP-LINK Archer AX6000 OS Command Injection Vulnerability

The TP-LINK Archer is a series of routers from China P&L TP-LINK. A security vulnerability exists in firmware versions prior to TP-LINK Archer AX6000JPV11.3.0 Build 20221208, which stems from a vulnerability that allows network-adjacent authenticated attackers to execute arbitrary operating syste...

PT-2023-25591 · Tp Link · Tl-Wr802N +2

Name of the Vulnerable Software and Affected Versions: TL-WR802N versions prior to TL-WR802NJP V4 221008 TL-WR841N versions prior to TL-WR841NJP V14 230506 TL-WR902AC versions prior to TL-WR902ACJP V3 230506 Description: Multiple TP-LINK products allow a network-adjacent unauthenticated attacker ...

TP-LINK Archer C1200 OS Command Injection Vulnerability

The TP-LINK Archer C1200 is a wireless router from China P&L TP-LINK. A security vulnerability exists in firmware versions prior to TP-LINK Archer C1200JPV2230508, Archer C9JPV3230508, and Archer C9JPV3230508, which stems from a vulnerability that could allow a network-adjacent authenticated...

TP-LINK Deco M4 OS Command Injection Vulnerability

The TP-LINK Deco M4 is a wireless router from China P&L TP-LINK. A security vulnerability exists in versions prior to TP-LINK Deco M4 V21.5.8 Build 20230619, which stems from a vulnerability that allows network-adjacent authenticated attackers to execute arbitrary operating system commands...

TP-LINK Archer C5400 OS Command Injection Vulnerability

The TP-LINK Archer is a series of routers from China P&L TP-LINK. A security vulnerability exists in versions prior to TP-LINK Archer C5400 V2230506, which stems from a vulnerability that allows network-adjacent authenticated attackers to execute arbitrary operating system commands...