CVE-2018-12692
high · 8.8TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the wps_setup_pin parameter to /data/wps.setup.json.
8.8
CVSS
28.8%
EPSS (exploit prob.)
98th
EPSS percentile
2018-06-23
Published
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-78
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| tp-link | tl-wa850re_firmware | all versions |
| tp-link | tl-wa850re | 5 |
Check a specific version with /api/v1/cve/match.
References
- https://medium.com/advisability/the-in-security-of-the-tp-link-technologies-tl-wa850re-wi-fi-range-extender-26db87a7a0cc
- https://www.exploit-db.com/exploits/44912/
- https://medium.com/advisability/the-in-security-of-the-tp-link-technologies-tl-wa850re-wi-fi-range-extender-26db87a7a0cc
- https://www.exploit-db.com/exploits/44912/
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2018-12692