TP-Link M7350 multiple vulnerabilities

Overview :
Multiple security vulnerabilities in TP-Link M7350 devices
Affected Product(s) :
  • TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n and previous versions
Vulnerability Details :
CVE ID : CVE-2019-13649
TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow in the field “externalPort” an OS Command Injection
CVE ID : CVE-2019-13650
TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow in the field “internalPort” an OS Command Injection
CVE ID : CVE-2019-13651
TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow in the field “portMappingProtocol” an OS Command Injection
CVE ID : CVE-2019-13652
TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow in the field “serviceName” an OS Command Injection
CVE ID : CVE-2019-13653
TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow triggerPort OS Command Injection (issue 5 of 5)
Solution(s) :
Update TP-Link M7350 devices to the Latest Build

 

Common Vulnerabilityies and Exposures

Contact us to get started

CVE-2022-41157 : KYUNGRINARA ERP SOLUTION SERP SERVER HARD-CODED CREDENTIALS

CVE-2022-41157 : KYUNGRINARA ERP SOLUTION SERP SERVER HARD-CODED CREDENTIALS

Description A specific file on the sERP server if Kyungrinara(ERP solution) has a fixed password with the SYSTEM authority. This

CVE-2022-45884 : LINUX KERNEL UP TO 6.0.9 DVBDEV.C DVB_REGISTER_DEVICE USE AFTER FREE

CVE-2022-45884 : LINUX KERNEL UP TO 6.0.9 DVBDEV.C DVB_REGISTER_DEVICE USE AFTER FREE

Description An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbdev.c has a use-after-free, related to dvb_register_device dynamically allocating

CVE-2022-41875 : OPTICA UP TO 0.10.1 JSON OJ.SAFE_LOAD DESERIALIZATION

CVE-2022-41875 : OPTICA UP TO 0.10.1 JSON OJ.SAFE_LOAD DESERIALIZATION

Description A remote code execution (RCE) vulnerability in Optica allows unauthenticated attackers to execute arbitrary code via specially crafted JSON