CVE-2023-40193

Summary

Deco M4 firmware versions prior to 'Deco M4(JP)_V2_1.5.8 Build 20230619' allows a network-adjacent authenticated attacker to execute arbitrary OS commands.

Affected Software

Weaknesses

• OS command injection

ADP Enrichment

CVE Program Container

Additional References

• https://www.tp-link.com/jp/support/download/deco-m4/v2/#Firmware
• https://jvn.jp/en/vu/JVNVU99392903/

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://www.tp-link.com/jp/support/download/deco-m4/v2/#Firmware
• https://jvn.jp/en/vu/JVNVU99392903/

• ←Previous
• Next→