CVE-2022-30075

Published: Jun 9, 2022Modified: Nov 21, 2024

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

In TP-Link Router AX50 firmware 210730 and older, import of a malicious backup file via web interface can lead to remote code execution due to improper validation.

Affected (1)

Products: Tp Link: Archer Ax50 Firmware

Tp Link

1 product

Archer Ax50 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Archer Ax50 Firmware	Up to 210730

Running on/with	Platform Versions
Tp Link Archer Ax50	All versions

References (10)

http://packetstormsecurity.com/files/167522/TP-Link-AX50-Remote-Code-Execution.html

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

http://tp-link.com

Source: cve@mitre.org

ProductVendor Advisory

https://github.com/aaronsvk

Source: cve@mitre.org

Third Party Advisory

https://github.com/aaronsvk/CVE-2022-30075

Source: cve@mitre.org

ExploitThird Party Advisory

https://www.exploit-db.com/exploits/50962

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

http://packetstormsecurity.com/files/167522/TP-Link-AX50-Remote-Code-Execution.html