Description
TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow portMappingProtocol OS Command Injection (issue 3 of 5).
References (2)
Core 2
Core References
Product x_refsource_misc
https://www.tp-link.com
Exploit, Third Party Advisory x_refsource_misc
https://pastebin.com/yAxBFe05
Scores
CVSS v3
9.8
EPSS
0.0267
EPSS Percentile
86.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-78
Status
published
Products (1)
tp-link/m7350_firmware
< 1.0.16
Published
Oct 24, 2019
Tracked Since
Feb 18, 2026