High severity8.8NVD Advisory· Published Sep 20, 2023· Updated Jun 17, 2026

CVE-2023-43138

Description

TPLINK TL-ER5120G 4.0 2.0.0 Build 210817 Rel.80868n has a command injection vulnerability, when an attacker adds NAPT rules after authentication, and the rule name has an injection point.

Affected products

TP-Link/Tl Er5120g Firmware
cpe:2.3:o:tp-link:tl-er5120g_firmware:2.0.0:build_210817:*:*:*:*:*:*
TPLINK/TL-ER5120Gdescription
TP-Link/TL-ER5120Gllm-fuzzy
Range: 4.0 2.0.0 Build 210817 Rel.80868n

Patches

Vulnerability mechanics

References

github.com/7R4C4R/CVE/blob/main/TPLINK-TL-ER5120G/command%20injection/02/command%20injection02.mdnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000