CVE-2019-13653

Name of the Vulnerable Software and Affected Versions TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n

Description The issue exists due to the lack of neutralization of special elements used in the operating system command in the Port Triggering function of the TP-Link M7350 router's firmware. Exploitation of this issue may allow a remote attacker to execute arbitrary commands.

Recommendations For TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n, consider disabling the Port Triggering function as a temporary workaround until a patch is available. Restrict access to the device to minimize the risk of exploitation.