Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
TP-Link Archer C5400X - RFTest Unauthenticated Command Injection
Vulnerability Description
The affected device expose a network service called "rftest" that is vulnerable to unauthenticated command injection on ports TCP/8888, TCP/8889, and TCP/8890. By successfully exploiting this flaw, remote unauthenticated attacker can gain arbitrary command execution on the device with elevated privileges.This issue affects Archer C4500X: through 1_1.1.6.
CVSS Information
N/A
Vulnerability Type
在命令中使用的特殊元素转义处理不恰当(命令注入)
Vulnerability Title
TP-LINK Archer C4500X 安全漏洞
Vulnerability Description
TP-LINK Archer C4500X是中国普联（TP-LINK）公司的一款无线路由器。 TP-LINK Archer C4500X存在安全漏洞，该漏洞源于 rftest 网络服务容易受到端口 TCP/8888、TCP/8889 和 TCP/8890 上未经身份验证的命令注入的攻击，远程攻击者利用该漏洞可以使用提升的权限在设备上执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A