Vulnerabilities > CVE-2022-30075 - Unspecified vulnerability in Tp-Link Archer Ax50 Firmware 210730
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
In TP-Link Router AX50 firmware 210730 and older, import of a malicious backup file via web interface can lead to remote code execution due to improper validation.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| OS | 2 | |
| Hardware | 1 |
References
- http://packetstormsecurity.com/files/167522/TP-Link-AX50-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/167522/TP-Link-AX50-Remote-Code-Execution.html
- http://tp-link.com
- http://tp-link.com
- https://github.com/aaronsvk
- https://github.com/aaronsvk
- https://github.com/aaronsvk/CVE-2022-30075
- https://github.com/aaronsvk/CVE-2022-30075
- https://www.exploit-db.com/exploits/50962
- https://www.exploit-db.com/exploits/50962