CVE-2023-27078

Name of the Vulnerable Software and Affected Versions TP-Link MR3020 version 1 150921

Description A command injection issue allows a remote attacker to execute arbitrary commands via a crafted request to the "tftp endpoint". This issue is related to the lack of data cleaning measures at the management level, which can be exploited by a remote attacker to execute arbitrary commands.

Recommendations For TP-Link MR3020 version 1 150921, consider disabling access to the "tftp endpoint" until a patch is available to prevent exploitation of the command injection issue.