Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Authenticated Command Injection on TP-Link TL-WR802N, TL-WR841N and TL-WR840N
Vulnerability Description
A command injection vulnerability was identified in TP-Link TL-WR802N v4, TL-WR841N v14, and TL-WR840N v6 due to improper neutralization of special elements used in an OS command. In the router configuration import function allows an authenticated attacker to upload a crafted configuration file that results in execution of OS commands with root privileges during port-trigger processing. Successful exploitation allows an authenticated attacker to execute system commands with root privileges, leading to full device compromise.
CVSS Information
N/A
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Vulnerability Title
TP-LINK多款产品 安全漏洞
Vulnerability Description
TP-LINK TL-WR802N等都是中国普联（TP-LINK）公司的产品。TP-LINK TL-WR802N是一个无线路由器。TP-LINK TL-WR840N是一款无线路由器。TP-Link TL-WR841N等都是中国普联（TP-Link）公司的产品。TP-Link TL-WR841N是一款路由器。 TP-LINK多款产品存在安全漏洞，该漏洞源于路由器配置导入功能中对特殊元素的中和不当，可能导致经过身份验证的攻击者执行具有root权限的OS命令。以下产品及版本受到影响：TP-Link TL-WR8
CVSS Information
N/A
Vulnerability Type
N/A