CVE-2023-40357: falha de alta gravidade em TP-LINK Archer AX50
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8epss 0.5%
Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer AX50 firmware versions prior to 'Archer AX50(JP)_V1_230529', Archer A10 firmware versions prior to 'Archer A10(JP)_V2_230504', Archer AX10 firmware versions prior to 'Archer AX10(JP)_V1.2_230508', and Archer AX11000 firmware versions prior to 'Archer AX11000(JP)_V1_230523'.
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
TP-LINK · Archer A10TP-LINK · Archer AX10TP-LINK · Archer AX11000TP-LINK · Archer AX50CVEs relacionadas — TP-LINK Archer AX50
No mesmo produto, das mais perigosas para as menos.
Referências
https://jvn.jp/en/vu/JVNVU99392903/https://www.tp-link.com/jp/support/download/archer-a10/#Firmwarehttps://www.tp-link.com/jp/support/download/archer-ax10/#Firmwarehttps://www.tp-link.com/jp/support/download/archer-ax11000/#Firmwarehttps://www.tp-link.com/jp/support/download/archer-ax50/#Firmware