Command Injection Vulnerability on TP-Link Routers
A high probability vulnerability has been identified in TP-Link Archer AX21 routers, which could have a severe impact on users. According to the NCC CSIRT Security Advisory for May 5, 2023, a remote attacker could exploit the vulnerability by sending a specially crafted request to the router, leading to remote code execution on the targeted system.
The vulnerability is caused by a command injection flaw present in TP-Link Archer AX21 firmware versions prior to 1.1.4 Build 20230219. The flaw exists in a parameter of the web management interface and could allow an unauthenticated attacker to insert commands.
In response to the vulnerability, the NCC recommends that users of the affected TP-Link Archer AX21 routers update their firmware to the latest version. The firmware upgrade can be obtained from the official TP-Link website or the purchase location of TP-Link devices.
This vulnerability highlights the importance of staying vigilant about cybersecurity threats and taking appropriate measures to protect yourself and your devices. Users are urged to apply security patches promptly and to maintain up-to-date antivirus software to prevent cyberattacks.
