CVE-2023-31756

A command injection vulnerability exists in the administrative web portal in TP-Link Archer VR1600V devices running firmware Versions <= 0.1.0. 0.9.1 v5006.0 Build 220518 Rel.32480n which allows remote attackers, authenticated to the administrative web portal as an administrator user to open an operating system level shell via the 'X_TP_IfName' parameter.

CVSS v3.1

6.7 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1

6.7 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

1.76% chance of exploitation in the next 30 days, 76th percentile

Published

2023-05-19

Updated

2025-01-21

Proof-of-concept exploits (1)

• StanleyJobsonAU/LongBow2★ · 2024-01-17

References

• CVE Record
• NVD entry

Related

• CVE-2023-42793
• CVE-2023-31754
• CVE-2023-31757
• CVE-2023-31753
• CVE-2023-3176
• CVE-2023-3175