Most recent entries from all

bdu:2023-06252

cnvd-2023-83068

fkie_cve-2023-40357

GHSA-4cvv-xwg7-pq34

gsd-2023-40357

VAR-202309-0276

Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer AX50 firmware versions prior to 'Archer AX50(JP)_V1_230529', Archer A10 firmware versions prior to 'Archer A10(JP)_V2_230504', Archer AX10 firmware versions prior to 'Archer AX10(JP)_V1.2_230508', and Archer AX11000 firmware versions prior to 'Archer AX11000(JP)_V1_230523'. TP-LINK Technologies The product has OS A command injection vulnerability exists.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. TP-LINK Archer is a series of routers from China TP-LINK Company. This vulnerability is caused by the application's failure to properly filter special characters, commands, etc. that construct commands