Command Execution Vulnerability in TP-LINK WAR302 Router

TP-LINK WAR302 is an enterprise-grade 300M wireless VPN router that supports multiple VPN clients and Internet behavior management. The TP-LINK WAR302 router suffers from a command execution vulnerability that stems from a failure to properly filter user-submitted parameters, which can be exploit...

TP-Link Remote Command Injection

Introduction: ================ The WVR-, WAR- and ER- products are the SOHO/WIFI routers of TP-Link. These issues allow remote authenticated administrators to execute arbitrary commands via command injection through different variables of different lua files. If the attacker obtains the account a...

Tplink Bridge Authenticated RCE

Vulnerability: Command Injection in bridge.lua ------------------------------------------ Exploitation: Can remote command execution on the root shell. ------------------------------------------ Vendor of Product: Tp-Link router ------------------------------------------ Affected Products and...