A post authentication command injection vulnerability exists when configuring...
Vulnerability Description
A post authentication command injection vulnerability exists when configuring the wireguard VPN functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection . An attacker can make an authenticated HTTP request to trigger this vulnerability.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-46683
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Discovered by the Vulnerability Discovery and Research team of Cisco Talos.
More from Tp-Link
View All →Affected Vendor
Tp-Link
View all reports →