HIGH

CVE-2023-1389

Tp-link Archer Ax21 Firmware 2023-03-15 CVSS v3.1
CVSS
8.8
KEV

Description

TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability in the country form of the /cgi-bin/luci;stok=/locale endpoint on the web management interface. Specifically, the country parameter of the write operation was not sanitized before being used in a call to popen(), allowing an unauthenticated attacker to inject commands, which would be run as root, with a simple POST request.

Summary dbcve.org

Unauthenticated command injection in TP-Link Archer AX21 router web management interface. The vulnerability exists in the country parameter of the /cgi-bin/luci;stok=/locale endpoint's write operation, where unsanitized input is passed to popen(), allowing arbitrary command execution as root via simple POST request.

Mitigation

Apply TP-Link firmware version 1.1.4 Build 20230219 or later to patch the vulnerability. If immediate patching is not possible, restrict web management interface access to trusted IPs or disable remote management entirely.

Proof of Concept

Weakness (CWE)

CWE-77 Command Injection

EPSS Score

100%
Probability of exploitation in next 30 days
100th percentile

References

View on dbcve.org
Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.
Back to CVE