PT-2019-12642 · Tp Link · Tp-Link M7350

G Richter · Publicado 2019-08-14 · Atualizado 2019-08-19 · CVE-2019-12104

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TP-Link M7350 V3 versions prior to firmware 190531

Description The web-based configuration interface is affected by several post-authentication command injection issues.

Recommendations For versions prior to firmware 190531, update the firmware to version 190531 or later to resolve the issue.

Exploit

Correção

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

CVE-2019-12104

Produtos afetados

Tp-Link M7350

Referências · 4

• 🔥 https://pentestpartners.com/security-blog/cve-2019-12103-analysis-of-a-pre-auth-rce-on-the-tp-link-m7350-with-ghidra · Exploit
• https://osv.dev/vulnerability/CVE-2019-12104 · Aviso do Fabricante
• https://tp-link.com/uk/support/download/m7350/v3/#Firmware · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-12104 · Nota de Segurança