Lucene search

MitreCVE-2023-27836

HistoryJun 13, 2023 - 7:15 p.m.

CVE-2023-27836

2023-06-1319:15:09

CWE-77

mitre

web.nvd.nist.gov

cve-2023-27836

tp-link

tl-wpa8630p

command injection

vulnerability

nvd

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.051

Percentile

93.0%

JSON

TP-Link TL-WPA8630P (US)_ V2_ Version 171011 was discovered to contain a command injection vulnerability via the devicePwd parameter in the function sub_ 40A80C.

Affected configurations

Nvd

Node

tp-linktl-wpa8630p_firmwareMatch171011

AND

tp-linktl-wpa8630pMatch2.0

VendorProductVersionCPE
tp-linktl-wpa8630p_firmware171011cpe:2.3:o:tp-link:tl-wpa8630p_firmware:171011:*:*:*:*:*:*:*
tp-linktl-wpa8630p2.0cpe:2.3:h:tp-link:tl-wpa8630p:2.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
tp-link	tl-wpa8630p_firmware	171011	cpe:2.3:o:tp-link:tl-wpa8630p_firmware:171011:::::::*
tp-link	tl-wpa8630p	2.0	cpe:2.3:h:tp-link:tl-wpa8630p:2.0:::::::*

References

github.com/lzd521/IOT/tree/main/TP-Link%20WPA8630P%202

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.051

Percentile

93.0%

JSON

Related for CVE-2023-27836