Unrated severityNVD Advisory· Published Sep 20, 2023· Updated Sep 25, 2024

CVE-2023-43138

Description

TPLINK TL-ER5120G 4.0 2.0.0 Build 210817 Rel.80868n has a command injection vulnerability, when an attacker adds NAPT rules after authentication, and the rule name has an injection point.

Affected products

TPLINK/TL-ER5120Gdescription
TP-Link/TL-ER5120Gllm-fuzzy
Range: = 4.0 2.0.0 Build 210817 Rel.80868n

Patches

Vulnerability mechanics

References

github.com/7R4C4R/CVE/blob/main/TPLINK-TL-ER5120G/command%20injection/02/command%20injection02.mdmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000