Lucene search
PRIOn knowledge basePRION:CVE-2023-47617HistoryFeb 06, 2024 - 5:15 p.m.
Command injection
2024-02-0617:15:00
PRIOn knowledge base
www.prio-n.com
9
command injection
post authentication
web group member
http request
arbitrary command injection
authenticated request
tp-link er7206
omada gigabit router
nvd
A post authentication command injection vulnerability exists when configuring the web group member of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| er7206_firmware | eq | 1.3.0 build20230322rel70591 |
Related
nvd
nvd
CVE-2023-47617
2024-02-06 17:15:09
talos
talos
cvelist
cvelist
CVE-2023-47617
2024-02-06 16:20:13
cve
cve
CVE-2023-47617
2024-02-06 17:15:09
talosblog
talosblog
Multiple vulnerabilities in TP-Link Omada system could lead to root access
2024-06-26 16:00:24