Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusThis script is Copyright (C) 2023-2024 and is owned by Tenable, Inc. or an Affiliate thereof.TPLINK_ARCHER_AX21_CVE-2023-1389.NBIN
HistoryJun 26, 2023 - 12:00 a.m.

TP-Link Archer AX21 Command Injection (CVE-2023-1389)

2023-06-2600:00:00
This script is Copyright (C) 2023-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
39
tp-link
archer ax21
command injection
vulnerability
cve-2023-1389
binary data
scanner

8.8 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.059 Low

EPSS

Percentile

93.5%

JSON

The remote TP-Link Archer AX21 device is vulnerable to a command injection vulnerability. An unauthenticated network-adjacent attacker could leverage this vulnerability, via a specially crafted message, to execute arbitrary code as root on the device.

Binary data tplink_archer_ax21_cve-2023-1389.nbin
VendorProductVersionCPE
tp-linkarcher_ax21cpe:/h:tp-link:archer_ax21

Related

cisa_kev 1
prion 1
nvd 1
attackerkb 1
zdt 1
githubexploit 2
thn 5
cnvd 1
zdi 1
packetstorm 1
cvelist 1
cve 1
exploitdb 1
malwarebytes 1
cisa_kev
cisa_kev
TP-Link Archer AX-21 Command Injection Vulnerability
2023-05-01 00:00:00
prion
prion
Command injection
2023-03-15 23:15:00
nvd
nvd
CVE-2023-1389
2023-03-15 23:15:09
attackerkb
attackerkb
CVE-2023-1389
2023-03-15 00:00:00
zdt
zdt
TP-Link Archer AX21 - Unauthenticated Command Injection Exploit
2023-08-10 00:00:00
githubexploit
githubexploit
Exploit for Command Injection in Tp-Link Archer Ax21 Firmware
2023-09-09 15:53:22
Exploit for Command Injection in Tp-Link Archer Ax21 Firmware
2023-07-28 03:09:00
thn
thn
New Condi Malware Hijacking TP-Link Wi-Fi Routers for DDoS Botnet Attacks
2023-06-21 05:36:00
Cisco Warns of Global Surge in Brute-Force Attacks Targeting VPN and SSH Services
2024-04-17 08:38:00
Alert: Active Exploitation of TP-Link, Apache, and Oracle Vulnerabilities Detected
2023-05-02 05:35:00
cnvd
cnvd
TP-Link Archer AX21 AX1800 Command Injection Vulnerability
2023-03-16 00:00:00
zdi
zdi
(Pwn2Own) TP-Link Archer AX21 merge_country_config Command Injection Remote Code Execution Vulnerability
2023-04-24 00:00:00
packetstorm
packetstorm
TP-Link Archer AX21 Command Injection
2023-08-11 00:00:00
cvelist
cvelist
CVE-2023-1389
2023-03-15 00:00:00
cve
cve
CVE-2023-1389
2023-03-15 23:15:09
exploitdb
exploitdb
TP-Link Archer AX21 - Unauthenticated Command Injection
2023-08-10 00:00:00
malwarebytes
malwarebytes
Oracle WebLogic Server vulnerability added to CISA list as “known to be exploited”
2023-05-03 14:30:00

8.8 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.059 Low

EPSS

Percentile

93.5%

JSON
Related for TPLINK_ARCHER_AX21_CVE-2023-1389.NBIN
cisa_kev1prion1nvd1attackerkb1zdt1githubexploit2thn5cnvd1zdi1packetstorm1cvelist1cve1exploitdb1malwarebytes1