Multiple vulnerabilities in TP-Link products



Published: 2024-01-12
Risk Medium
Patch available YES
Number of vulnerabilities 3
CVE-ID CVE-2024-21773
CVE-2024-21821
CVE-2024-21833
CWE-ID CWE-78
Exploitation vector Local network
Public exploit N/A
Vulnerable software
Subscribe 		Archer AX3000
Hardware solutions / Routers & switches, VoIP, GSM, etc

Archer AX5400
Hardware solutions / Routers & switches, VoIP, GSM, etc

Deco X50
Hardware solutions / Routers & switches, VoIP, GSM, etc

Deco XE200
Hardware solutions / Routers & switches, VoIP, GSM, etc

Archer AXE75
Hardware solutions / Routers & switches, VoIP, GSM, etc

Vendor

Security Bulletin

This security bulletin contains information about 3 vulnerabilities.

1) OS Command Injection

EUVDB-ID: #VU85327

Risk: Medium

CVSSv3.1: 6.5 [CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2024-21773

CWE-ID: CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary shell commands on the target system.

The vulnerability exists due to improper input validation. A remote unauthenticated attacker on the local network can pass specially crafted data to the application and execute arbitrary OS commands on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Archer AX3000: before 1.1.2 20231115

Archer AX5400: before 1.1.2 20231115

Deco X50: before 1.4.1 20231122

Deco XE200: before 1.2.5 20231120

External links

http://www.tp-link.com/jp/support/download/archer-ax3000/#Firmware
http://www.tp-link.com/jp/support/download/archer-ax5400/#Firmware
http://www.tp-link.com/jp/support/download/deco-x50/v1/#Firmware
http://www.tp-link.com/jp/support/download/deco-xe200/#Firmware
http://jvn.jp/en/vu/JVNVU91401812/


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the local network (LAN).

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) OS Command Injection

EUVDB-ID: #VU85328

Risk: Medium

CVSSv3.1: 6.2 [CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2024-21821

CWE-ID: CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary shell commands on the target system.

The vulnerability exists due to improper input validation. A remote user on the local network can pass specially crafted data to the application and execute arbitrary OS commands on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Archer AX3000: before 1.1.2 20231115

Archer AX5400: before 1.1.2 20231115

Archer AXE75: before 1_231115

External links

http://www.tp-link.com/jp/support/download/archer-ax3000/#Firmware
http://www.tp-link.com/jp/support/download/archer-ax5400/#Firmware
http://www.tp-link.com/jp/support/download/archer-axe75/#Firmware
http://jvn.jp/en/vu/JVNVU91401812/


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the local network (LAN).

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) OS Command Injection

EUVDB-ID: #VU85329

Risk: Medium

CVSSv3.1: 6.5 [CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2024-21833

CWE-ID: CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary shell commands on the target system.

The vulnerability exists due to improper input validation. A remote unauthenticated attacker on the local network can pass specially crafted data to the application and execute arbitrary OS commands on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Archer AX3000: before 1.1.2 20231115

Archer AX5400: before 1.1.2 20231115

Archer AXE75: before 1_231115

Deco X50: before 1.4.1 20231122

Deco XE200: before 1.2.5 20231120

External links

http://www.tp-link.com/jp/support/download/archer-ax3000/#Firmware
http://www.tp-link.com/jp/support/download/archer-ax5400/#Firmware
http://www.tp-link.com/jp/support/download/archer-axe75/#Firmware
http://www.tp-link.com/jp/support/download/deco-x50/v1/#Firmware
http://www.tp-link.com/jp/support/download/deco-xe200/#Firmware
http://jvn.jp/en/vu/JVNVU91401812/


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the local network (LAN).

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###