Description
TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow serviceName OS Command Injection (issue 4 of 5).
References (1)
Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
https://pastebin.com/yAxBFe05
Scores
CVSS v3
9.8
EPSS
0.0401
EPSS Percentile
88.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-78
Status
published
Products (1)
tp-link/m7350_firmware
< 1.0.16
Published
Oct 24, 2019
Tracked Since
Feb 18, 2026