CVE-2020-28347

Name of the Vulnerable Software and Affected Versions tdpServer on TP-Link Archer A7 AC1750 devices before 201029

Description The issue allows remote attackers to execute arbitrary code via the slave mac parameter. This is due to an incomplete fix for a previous issue, where shell quotes are mishandled.

Recommendations For versions before 201029, update to version 201029 or later to resolve the issue. As a temporary workaround, consider restricting access to the slave mac parameter to minimize the risk of exploitation.