TP-Link Vulnerable to OS Command Injection Through 2024.03.28

CVE-2023-6437

Summary

The OS Command Injection vulnerability in various TP-Link networking devices allows attackers to execute arbitrary commands on the affected systems. This issue affects models such as the TP-Link EX20v AX1800, Archer C5v AC1200, TD-W9970, and more, enabling authenticated users to gain unauthorized control over the system. The vulnerability is particularly concerning for devices like the TP-Link VX220-G2u and VN020-G2u, which are no longer produced or supported, leaving them susceptible to exploitation. Organizations using these devices should take immediate action to mitigate risks associated with this vulnerability.

References