CVE-2023-1389
TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability in the country form of the /cgi-bin/luci;stok=/locale endpoint on the web management interface. Specifically, the country parameter of the write operation was not sanitized before being used in a call to popen(), allowing an unauthenticated attacker to inject commands, which would be run as root, with a simple POST request.
- Affected products
- Tp-Link Archer Ax21
- Tp-link Archer ax21 Firmware
- < 1.1.4
- Fix
- Available
- CVSS 3.1
- 8.8 HIGH
- EPSS
- 100.0% (100th percentile)
- Weakness
- CWE-77
- NVD status
- Analyzed
- Published
- 2023-03-15
CVE-2023-1389 at NVD
6 known exploits for CVE-2023-1389
Proof-of-concept code and exploit modules indexed by Sploitus
Exploit for CVE-2014-8361
Exploit for Command Injection in Tp-Link Archer_Ax21_Firmware
TP-Link Archer AX21 Command Injection
TP-Link Archer AX21 - Unauthenticated Command Injection
TP-Link Archer AX21 - Unauthenticated Command Injection Exploit
Exploit for Command Injection in Tp-Link Archer_Ax21_Firmware