TP-Link TL-WA850RE Remote Arbitrary Code Execution Vulnerability

The TP-Link TL-WA850RE is a wireless extender. A remote arbitrary code execution vulnerability exists in the TP-Link TL-WA850RE Wi-Fi Range Extender using TL-WA850RE v5 firmware. A remote attacker can exploit this vulnerability by sending the 'wpssetuppin' parameter with shell metacharacters to t...

Code injection

TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the wpssetuppin parameter to /data/wps.setup.json...

PT-2018-11335

Name of the Vulnerable Software and Affected Versions TP-Link TL-WA850RE Wi-Fi Range Extender version 5 Description The issue allows remote authenticated users to execute arbitrary commands. This is achieved by using shell metacharacters in the wps setup pin parameter to the "/data/wps.setup.json...