Description (CNA)
A command Injection vulnerability exists in the WireGuard client configuration of Archer MR600 v5 due to improper neutralization of user-controlled input within the web management interface. An authenticated attacker with administrative privileges may be able to execute arbitrary commands when applying configuration changes.Successful exploitation may result in a full compromise of confidentiality, integrity, and availability of the affected device.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| TP-Link Systems Inc. / Archer MR600 v5 | affected 0 before EU_V5_1.7.0 0.9.1 260518 rel67803; affected 0 before JP_V5_1.2.0 0.9.1 260519 rel52362 |
CWE
CWE-78
References
- https://www.tp-link.com/en/support/download/archer-mr600/v5/#Firmware
- https://www.tp-link.com/jp/support/download/archer-mr600/v5/#Firmware
- https://www.tp-link.com/us/support/faq/5122/
ADP enrichment
No English description supplied.
No references supplied.