TP-Link Omada ER605 PPTP VPN username Command Injection Remote Code Execution Vulnerability
CVE-2024-5227

7.5HIGH

Key Information:

Vendor

TP-Link
Status
Omada Er605 Firmware
Vendor
CVE Published:
23 May 2024

What is CVE-2024-5227?

The TP-Link Omada ER605 router is susceptible to a command injection vulnerability that enables network-adjacent attackers to execute arbitrary code. This exploit does not require authentication, making it particularly concerning for devices configured with a PPTP VPN using LDAP authentication. The vulnerability originates from the inadequate validation of the username parameter within the pppd endpoint, allowing attackers to manipulate system calls and execute code with root privileges. Proper configuration and security measures are essential to mitigate this risk.

References

https://www.zerodayinitiative.com/advisories/ZDI-24-499/

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.
CVE-2024-5227 : TP-Link Omada ER605 PPTP VPN username Command Injection Remote Code Execution Vulnerability