CVE-2023-36498

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-36498
A post-authentication command injection vulnerability exists in the PPTP client functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an authenticated HTTP request to trigger this vulnerability and gain access to an unrestricted shell.

7.2 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://talosintelligence.com/vulnerability_reports/TALOS-2023-1853 Exploit Technical Description Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:tp-link:er7206_firmware:1.3.0:build_20230322_rel_70591:*:*:*:*:*:*
cpe:2.3:h:tp-link:er7206:-:*:*:*:*:*:*:*
History

09 Feb 2024, 02:09

Type Values Removed Values Added
First Time Tp-link
Tp-link er7206
Tp-link er7206 Firmware
CPE cpe:2.3:h:tp-link:er7206:-:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:er7206_firmware:1.3.0:build_20230322_rel_70591:*:*:*:*:*:*
References () https://talosintelligence.com/vulnerability_reports/TALOS-2023-1853 - () https://talosintelligence.com/vulnerability_reports/TALOS-2023-1853 - Exploit, Technical Description, Third Party Advisory
Summary
  • (es) Existe una vulnerabilidad de inyección de comando posterior a la autenticación en la funcionalidad del cliente PPTP de Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. Una solicitud HTTP especialmente manipulada puede dar lugar a la inyección de comandos arbitrarios. Un atacante puede realizar una solicitud HTTP autenticada para activar esta vulnerabilidad y obtener acceso a un shell sin restricciones.

06 Feb 2024, 18:15

Type Values Removed Values Added
References
  • {'url': 'https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1853', 'source': 'talos-cna@cisco.com'}

06 Feb 2024, 17:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-06 17:15

Updated : 2024-02-09 02:09

NVD link : CVE-2023-36498

Mitre link : CVE-2023-36498

CVE.ORG link : CVE-2023-36498

JSON object : View

Products Affected

tp-link

  • er7206_firmware
  • er7206
CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')