Sign-up

ID

VAR-202309-0275


CVE

CVE-2023-36489


DESCRIPTION

Multiple TP-LINK products allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: TL-WR802N firmware versions prior to 'TL-WR802N(JP)_V4_221008', TL-WR841N firmware versions prior to 'TL-WR841N(JP)_V14_230506', and TL-WR902AC firmware versions prior to 'TL-WR902AC(JP)_V3_230506'.

Trust: 1.0

sources: NVD: CVE-2023-36489

AFFECTED PRODUCTS

vendor:tp linkmodel:tl-wr802nscope:ltversion:221008

Trust: 1.0

vendor:tp linkmodel:tl-wr902acscope:ltversion:230506

Trust: 1.0

vendor:tp linkmodel:tl-wr841nscope:ltversion:230506

Trust: 1.0

sources: NVD: CVE-2023-36489

CVSS

SEVERITY

CVSSV2

CVSSV3

NVD: CVE-2023-36489
value: HIGH

Trust: 1.0

NVD: CVE-2023-36489
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: ADJACENT_NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 2.8
impactScore: 5.9
version: 3.1

Trust: 1.0

sources: NVD: CVE-2023-36489

PROBLEMTYPE DATA

problemtype:CWE-78

Trust: 1.0

sources: NVD: CVE-2023-36489

CONFIGURATIONS

sources:
            
            
            NVD: CVE-2023-36489

EXTERNAL IDS
db:JVNid:JVNVU99392903
Trust: 1.0
db:NVDid:CVE-2023-36489
Trust: 1.0
sources:
            
            
            NVD: CVE-2023-36489

REFERENCES
url:https://www.tp-link.com/jp/support/download/tl-wr902ac/#firmware
Trust: 1.0
url:https://www.tp-link.com/jp/support/download/tl-wr802n/#firmware
Trust: 1.0
url:https://www.tp-link.com/jp/support/download/tl-wr841n/v14/#firmware
Trust: 1.0
url:https://jvn.jp/en/vu/jvnvu99392903/
Trust: 1.0
sources:
            
            
            NVD: CVE-2023-36489

SOURCES
db:NVDid:CVE-2023-36489

LAST UPDATE DATE
2023-09-12T01:56:05.149000+00:00

SOURCES UPDATE DATE
db:NVDid:CVE-2023-36489date:2023-09-11T13:36:00

SOURCES RELEASE DATE
db:NVDid:CVE-2023-36489date:2023-09-06T10:15:00