← back
CVE-2023-36489

CVE-2023-36489

EPSS 0.5%
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
06 Sep 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Multiple TP-LINK products allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: TL-WR802N firmware versions prior to 'TL-WR802N(JP)_V4_221008', TL-WR841N firmware versions prior to 'TL-WR841N(JP)_V14_230506', and TL-WR902AC firmware versions prior to 'TL-WR902AC(JP)_V3_230506'.
Affected products
TP-LINK · TL-WR802NTP-LINK · TL-WR841NTP-LINK · TL-WR902AC

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://jvn.jp/en/vu/JVNVU99392903/https://www.tp-link.com/jp/support/download/tl-wr802n/#Firmwarehttps://www.tp-link.com/jp/support/download/tl-wr841n/v14/#Firmwarehttps://www.tp-link.com/jp/support/download/tl-wr902ac/#Firmware