NVD Vulnerability Detail

CVE-2020-28347

Summary	tdpServer on TP-Link Archer A7 AC1750 devices before 201029 allows remote attackers to execute arbitrary code via the slave_mac parameter. NOTE: this issue exists because of an incomplete fix for CVE-2020-10882 in which shell quotes are mishandled.
Publication Date	Nov. 9, 2020, 5:15 a.m.
Registration Date	Jan. 26, 2021, 11:56 a.m.
Last Update	Nov. 21, 2024, 2:22 p.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	https://github.com/pedrib/PoC/blob/master/advisories/Pwn2Own/Tokyo_2019/lao_bomb/lao_bomb.md	Exploit Third Party Advisory
2	https://github.com/pedrib/PoC/blob/master/advisories/Pwn2Own/Tokyo_2019/lao_bomb/lao_bomb.md	Exploit Third Party Advisory
3	https://github.com/pedrib/PoC/blob/master/advisories/Pwn2Own/Tokyo_2020/minesweeper.md	Exploit Third Party Advisory
4	https://github.com/pedrib/PoC/blob/master/advisories/Pwn2Own/Tokyo_2020/minesweeper.md	Exploit Third Party Advisory
5	https://github.com/rapid7/metasploit-framework/pull/14365	Exploit Patch Third Party Advisory
6	https://github.com/rapid7/metasploit-framework/pull/14365	Exploit Patch Third Party Advisory
7	https://github.com/rdomanski/Exploits_and_Advisories/blob/master/advisories/Pwn2Own/Tokyo2019/lao_bomb.md	Exploit Third Party Advisory
8	https://github.com/rdomanski/Exploits_and_Advisories/blob/master/advisories/Pwn2Own/Tokyo2019/lao_bomb.md	Exploit Third Party Advisory
9	https://github.com/rdomanski/Exploits_and_Advisories/blob/master/advisories/Pwn2Own/Tokyo2020/minesweeper.md	Exploit Third Party Advisory
10	https://github.com/rdomanski/Exploits_and_Advisories/blob/master/advisories/Pwn2Own/Tokyo2020/minesweeper.md	Exploit Third Party Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-78	OSコマンド・インジェクション	https://cwe.mitre.org/data/definitions/78.html

JVN Vulnerability Information

TP-Link Archer A7 AC1750 デバイスにおけるコマンドインジェクションの脆弱性

Title	TP-Link Archer A7 AC1750 デバイスにおけるコマンドインジェクションの脆弱性
Summary	TP-Link Archer A7 AC1750 デバイスには、コマンドインジェクションの脆弱性が存在します。本脆弱性は、CVE-2020-10882 に対する修正が不完全だったことに起因する脆弱性です。
Possible impacts	情報を取得される、情報を改ざんされる、およびサービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダ情報および参考情報を参照して適切な対策を実施してください。
Publication Date	Nov. 8, 2020, midnight
Registration Date	June 21, 2021, 4:36 p.m.
Last Update	June 21, 2021, 4:36 p.m.

Affected System

TP-LINK Technologies

AC 1750 ファームウェア 201029 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2020-28347	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28347
National Vulnerability Database (NVD)
2	CVE-2020-28347	https://nvd.nist.gov/vuln/detail/CVE-2020-28347

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-77	https://cwe.mitre.org/data/definitions/77.html

ベンダー情報

No	Name	URL
TP-LINK Technologies
1	AC1750 Wireless Dual Band Gigabit Router	https://www.tp-link.com/us/home-networking/wifi-router/archer-c7/

その他

No	Name	URL
関連文書
1	Update TP-Link AC1750 Pwn2Own 2019 module #14365	https://github.com/rapid7/metasploit-framework/pull/14365

Change Log

No	Changed Details	Date of change
1	[2021年06月21日] 掲載	June 21, 2021, 4:36 p.m.