Tp-Link M7350 Firmware vulnerabilities
8 known vulnerabilities affecting tp-link/m7350_firmware.
Total CVEs
8
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL7HIGH1
Vulnerabilities
Page 1 of 1
CVE-2022-37860P2CRITICALCVSS 9.8v1905312022-09-12
CVE-2022-37860 [CRITICAL] CWE-78 CVE-2022-37860: The web configuration interface of the TP-Link M7350 V3 with firmware version 190531 is affected by
The web configuration interface of the TP-Link M7350 V3 with firmware version 190531 is affected by a pre-authentication command injection vulnerability.
nvd
CVE-2019-13651P2CRITICALCVSS 9.8≤ 1.0.162019-10-24
CVE-2019-13651 [CRITICAL] CWE-78 CVE-2019-13651: TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow portMappingProtocol OS Command Inj
TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow portMappingProtocol OS Command Injection (issue 3 of 5).
nvd
CVE-2019-13649P2CRITICALCVSS 9.8≤ 1.0.162019-10-24
CVE-2019-13649 [CRITICAL] CWE-78 CVE-2019-13649: TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow externalPort OS Command Injection
TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow externalPort OS Command Injection (issue 1 of 5).
nvd
CVE-2019-13652P2CRITICALCVSS 9.8≤ 1.0.162019-10-24
CVE-2019-13652 [CRITICAL] CWE-78 CVE-2019-13652: TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow serviceName OS Command Injection (
TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow serviceName OS Command Injection (issue 4 of 5).
nvd
CVE-2019-13650P2CRITICALCVSS 9.8≤ 1.0.162019-10-24
CVE-2019-13650 [CRITICAL] CWE-78 CVE-2019-13650: TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow internalPort OS Command Injection
TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow internalPort OS Command Injection (issue 2 of 5).
nvd
CVE-2019-12103P2CRITICALCVSS 9.8fixed in 1905312019-08-14
CVE-2019-12103 [CRITICAL] CWE-78 CVE-2019-12103: The web-based configuration interface of the TP-Link M7350 V3 with firmware before 190531 is affecte
The web-based configuration interface of the TP-Link M7350 V3 with firmware before 190531 is affected by a pre-authentication command injection vulnerability.
nvd
CVE-2019-13653P2CRITICALCVSS 9.8≤ 1.0.162019-10-24
CVE-2019-13653 [CRITICAL] CWE-78 CVE-2019-13653: TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow triggerPort OS Command Injection (
TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow triggerPort OS Command Injection (issue 5 of 5).
nvd
CVE-2019-12104P2HIGHCVSS 8.8fixed in 1905312019-08-14
CVE-2019-12104 [HIGH] CWE-77 CVE-2019-12104: The web-based configuration interface of the TP-Link M7350 V3 with firmware before 190531 is affecte
The web-based configuration interface of the TP-Link M7350 V3 with firmware before 190531 is affected by several post-authentication command injection vulnerabilities.
nvd