PT-2024-1666 · Tp Link · Tp-Link Er7206 Omada Gigabit Vpn Router

The Vulnerability · Published 2024-02-06 · Updated 2024-02-09 · CVE-2023-36498

Positive Technologies (AI Summary)

CVSS v2.0

8.3

High

Base vector

AV:N/AC:L/Au:M/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Tp-Link ER7206 Omada Gigabit VPN Router version 1.3.0 build 20230322 Rel.70591

Description A post-authentication command injection vulnerability exists in the PPTP client functionality. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an authenticated HTTP request to trigger this vulnerability and gain access to an unrestricted shell. The vulnerability can be exploited by sending a crafted request to port 80/443, allowing a remote attacker to execute arbitrary commands.

Recommendations For Tp-Link ER7206 Omada Gigabit VPN Router version 1.3.0 build 20230322 Rel.70591, consider disabling the PPTP client functionality until a patch is available to prevent exploitation. Restrict access to port 80/443 to minimize the risk of exploitation. Avoid using the PPTP client functionality in the affected router until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2024-01348

CVE-2023-36498

Affected Products

Tp-Link Er7206 Omada Gigabit Vpn Router

References · 9

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2023-1853 · Exploit
• https://bdu.fstec.ru/vul/2024-01348 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-36498 · Security Note
• https://osv.dev/vulnerability/CVE-2023-36498 · Vendor Advisory
• https://twitter.com/CVEnew/status/1754907511969259938 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1754952339788644773 · Twitter Post
• https://vuldb.com/?id.253038 · Note
• https://t.me/cvenotify/70279 · Telegram Post
• https://t.me/cvenotify/70258 · Telegram Post