Description (CNA)
An authenticated OS command injection vulnerability exists in the IPv6 PPPoE configuration handler in TL-WR940N v6 due to improper sanitization of user input. An attacker with administrative access may exploit this issue to execute arbitrary system commands with elevated privileges.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| TP-Link Systems Inc. / TL-WR940N v6 | affected 0 before V6_260528 |
CWE
CWE-78
References
- https://www.tp-link.com/en/support/download/tl-wr940n/v6/#Firmware
- https://www.tp-link.com/us/support/download/tl-wr940n/v6/#Firmware
- https://www.tp-link.com/us/support/faq/5131/
ADP enrichment
No English description supplied.
No references supplied.