Description
The web-based configuration interface of the TP-Link M7350 V3 with firmware before 190531 is affected by several post-authentication command injection vulnerabilities.
References (2)
Core 2
Core References
Exploit, Third Party Advisory x_refsource_misc
https://www.pentestpartners.com/security-blog/cve-2019-12103-analysis-of-a-pre-auth-rce-on-the-tp-link-m7350-with-ghidra/
Patch, Vendor Advisory x_refsource_misc
https://www.tp-link.com/uk/support/download/m7350/v3/#Firmware
Scores
CVSS v3
8.8
EPSS
0.0693
EPSS Percentile
91.5%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-77
Status
published
Products (1)
tp-link/m7350_firmware
< 190531
Published
Aug 14, 2019
Tracked Since
Feb 18, 2026