CVE-2019-13649

CVE-2019-13649 affects TP-Link M7350 mobile routers. According to multiple sources, including NVD and CNVD/Red Hat records, devices running firmware up to 1.0.16 Build 181220 Rel.1116n expose an externalPort parameter that allows OS command injection, enabling an attacker to execute commands with...

CVE-2019-13651

The CVE-2019-13651 entry covers TP-Link M7350 devices with firmware up to 1.0.16 Build 181220 Rel.1116n. The vulnerability is a portMappingProtocol OS Command Injection in the device’s web interface, enabling an attacker to execute arbitrary OS commands. Affected component: portMappingProtocol ha...

CVE-2019-13653

The CVE-2019-13653 entry applies to TP-Link M7350 devices up to and including firmware 1.0.16 Build 181220 Rel.1116n. The vulnerability is a triggerPort OS Command Injection in TP-Link M7350, allowing execution of OS commands (root cause not explicitly detailed in provided documents). Connected s...

CVE-2019-13652

CVE-2019-13652 affects TP-Link M7350 devices running firmware up to 1.0.16 Build 181220 Rel.1116n. The issue is a serviceName OS Command Injection , enabling an attacker to execute OS commands on the device. Public sources in the connected documents consistently describe this vulnerability as a h...

CVE-2019-13650

CVE-2019-13650 affects TP-Link M7350 mobile routers. The connected sources describe an internalPort OS Command Injection vulnerability in TP-Link M7350 devices running 1.0.16 Build 181220 Rel.1116n and earlier, allowing an attacker to execute OS commands on the device. CVSS metrics from NVD indic...

CVE-2019-12103

The CVE-2019-12103 issue affects TP-Link M7350 V3 with firmware before 190531. The web-based configuration interface is vulnerable to a pre-authentication command injection, enabling an attacker to execute commands without authentication. Red Hat and CNVD entries corroborate the same pre-auth vul...

CVE-2019-12104

CVE-2019-12104 affects TP-Link M7350 V3 web-based configuration interface with firmware before 190531. Connected documents describe several post-authentication command injection vulnerabilities in this interface. The Red Hat entry (RH:CVE-2019-12104) corroborates the post-auth vulnerability class...

CVE-2022-37860

The CVE-2022-37860 issue affects the TP-Link M7350 V3 web configuration interface (firmware version 190531). All connected documents describe a pre-authentication command injection vulnerability in the web UI, stemming from insufficient input/data handling at the management level. Impact stated a...