PT-2023-5275 · Tp Link · Tp-Link Archer A10

CVE-2023-38568

·

Publicado

2023-09-06

·

Atualizado

2023-09-11

CVSS v3.1

8.8

Alta

VetorAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions TP-Link Archer A10 firmware versions prior to Archer A10(JP) V2 230504
Description The issue exists due to the lack of measures to neutralize special elements used in the operating system command. This allows a network-adjacent unauthenticated attacker to execute arbitrary OS commands.
Recommendations For TP-Link Archer A10 firmware versions prior to Archer A10(JP) V2 230504, update the firmware to version Archer A10(JP) V2 230504 or later to resolve the issue.

Correção

OS Command Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

BDU:2023-05896
CVE-2023-38568

Produtos afetados

Tp-Link Archer A10