high8.8Public exploit code
CVE-2022-30075
In TP-Link Router AX50 firmware 210730 and older, import of a malicious backup file via web interface can lead to remote code execution due to improper validat…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- TP-Link Router AX50 firmware 210730 - Remote Code Execution (RCE) (Authenticated)2022-06-14 · remote · hardware
Impact
In TP-Link Router AX50 firmware 210730 and older, import of a malicious backup file via web interface can lead to remote code execution due to improper validation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tp-Link | Archer Ax50 Firmware | through 210730 |
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/167522/TP-Link-AX50-Remote-Code-Execution.html
- https://github.com/aaronsvk
- https://github.com/aaronsvk/CVE-2022-30075
- https://www.exploit-db.com/exploits/50962
- http://packetstormsecurity.com/files/167522/TP-Link-AX50-Remote-Code-Execution.html
- https://github.com/aaronsvk
- https://github.com/aaronsvk/CVE-2022-30075
- https://www.exploit-db.com/exploits/50962