JVNDB-2024-003831

Multiple TP-Link products vulnerable to OS command injection

Multiple products provided by TP-LINK contains an OS command injection vulnerability (CWE-78) related to the backup/restore function.

Chuya Hayakawa of 00One, Inc. reported this vulnerability to JPCERT/CC.
JPCERT/CC coordinated with the developer.

TP-LINK Technologies

• Archer Air R5 firmware versions prior to "Archer Air R5(JP)_V1_1.1.6 Build 20240508"
• Archer AX3000 firmware versions prior to "Archer AX3000(JP)_V1_1.1.3 Build 20240415"
• Archer AX5400 firmware versions prior to "Archer AX5400(JP)_V1_1.1.4 Build 20240429"
• Archer AXE5400 firmware versions prior to "Archer AXE5400(JP)_V1_1.0.3 Build 20240319"
• Archer AXE75 firmware versions prior to "Archer AXE75(JP)_V1_1.2.0 Build 20240320"

A user who logs in to the affected device may execute an arbitrary OS command by restoring a crafted backup file.
The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi.

[Update the Firmware]
Update the firmware to the latest version according to the information provided by the developer.

TP-LINK Technologies

• TP-LINK Technologies : Download Center (Text in Japanese)
• TP-LINK Technologies : Contents for Archer AX3000 V1 (Text in Japanese)
• TP-LINK Technologies : Contents for Archer AXE75 V1 (Text in Japanese)
• TP-LINK Technologies : Contents for Archer Air R5 V1 (Text in Japanese)
• TP-LINK Technologies : Contents for Archer AXE5400 V1 (Text in Japanese)
• TP-LINK Technologies : Contents for Archer AX5400 V1 (Text in Japanese)

1. OS Command Injection(CWE-78) [Other]

1. CVE-2024-38471

1. JVN : JVNVU#99784493

• [2024/06/28]
    Web page was published