OS Command Injection in Web Interface in Multiple TP-Link Aginet Devices
Certain web
interface components in affected TP-Link Aginet devices do not validate and sanitize user-supplied input properly before
passing it to system-level command execution functions. An authenticated adjacent attacker may inject
specially crafted input to execute arbitrary operation system commands with
elevated privileges.
Successful
exploitation may allow execution of arbitrary system commands, potentially
leading to full device compromise.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
HB810(US2) V1.0/1.6/2.0/2.6
Vendor
TP-Link Systems Inc.
Product
HB810(US2) V1.0/1.6/2.0/2.6
Platforms
Unknown
Default status
unaffected
HB810(US2) V1.0/1.6/2.0/2.6 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
0.9.0 3.2.2 v6095.0 Build 260717 Rel.67188n
Unavailable
None listed
HB810(EU1) V2.0
Vendor
TP-Link Systems Inc.
Product
HB810(EU1) V2.0
Platforms
Unknown
Default status
unaffected
HB810(EU1) V2.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
0.10.0 3.2.2 v6095.0 Build 260306 Rel.47567n
Unavailable
None listed
HB710(US2) V1.6/1.0
Vendor
TP-Link Systems Inc.
Product
HB710(US2) V1.6/1.0
Platforms
Unknown
Default status
unaffected
HB710(US2) V1.6/1.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n
Unavailable
None listed
HB710(EU1) 1.0
Vendor
TP-Link Systems Inc.
Product
HB710(EU1) 1.0
Platforms
Unknown
Default status
unaffected
HB710(EU1) 1.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n
Unavailable
None listed
HB610(US2) V2.6/2.0
Vendor
TP-Link Systems Inc.
Product
HB610(US2) V2.6/2.0
Platforms
Unknown
Default status
unaffected
HB610(US2) V2.6/2.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n
Unavailable
None listed
HB610(EU1)
Vendor
TP-Link Systems Inc.
Product
HB610(EU1)
Platforms
Unknown
Default status
unaffected
HB610(EU1) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n
Unavailable
None listed
HB610(CA) V2.0
Vendor
TP-Link Systems Inc.
Product
HB610(CA) V2.0
Platforms
Unknown
Default status
unaffected
HB610(CA) V2.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
0.6.0 3.0.0 v60af.0 Build 251216 Rel.46954n
Unavailable
None listed
HB410( EU1) 1.0
Vendor
TP-Link Systems Inc.
Product
HB410( EU1) 1.0
Platforms
Unknown
Default status
unaffected
HB410( EU1) 1.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
0.3.0 3.0.0 v60bf.0 Build 250901 Rel.45574n
Unavailable
None listed
HB210(US2) 1.0
Vendor
TP-Link Systems Inc.
Product
HB210(US2) 1.0
Platforms
Unknown
Default status
unaffected
HB210(US2) 1.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n
Unavailable
None listed
HB210(EU1) 1.0
Vendor
TP-Link Systems Inc.
Product
HB210(EU1) 1.0
Platforms
Unknown
Default status
unaffected
HB210(EU1) 1.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n
Unavailable
None listed
HB210 Pro(EU1)1.0
Vendor
TP-Link Systems Inc.
Product
HB210 Pro(EU1)1.0
Platforms
Unknown
Default status
unaffected
HB210 Pro(EU1)1.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
0.5.0 3.0.0 v60d5.0 Build 250922 Rel.13742n
Unavailable
None listed
HB210 Pro(US2)1.0/1.6
Vendor
TP-Link Systems Inc.
Product
HB210 Pro(US2)1.0/1.6
Platforms
Unknown
Default status
unaffected
HB210 Pro(US2)1.0/1.6 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
0.8.0 3.0.0 v60d5.0 Build 260318 Rel.78363n
Unavailable
None listed
EB210 Pro(EU1) 1.0
Vendor
TP-Link Systems Inc.
Product
EB210 Pro(EU1) 1.0
Platforms
Unknown
Default status
unaffected
EB210 Pro(EU1) 1.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
0.2.0 3.0.0 v60f4.0 Build 250807 Rel.58901n
Unavailable
None listed
EB210 Pro(US1) 1.0
Vendor
TP-Link Systems Inc.
Product
EB210 Pro(US1) 1.0
Platforms
Unknown
Default status
unaffected
EB210 Pro(US1) 1.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
0.2.0 3.0.0 v60f4.0 Build 250807 Rel.58901n
Unavailable
None listed
EB810v(EU1) V1.0
Vendor
TP-Link Systems Inc.
Product
EB810v(EU1) V1.0
Platforms
Unknown
Default status
unaffected
EB810v(EU1) V1.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
0.6.0 3.0.0 v608b.0 Build 250613 Rel.10497n
Unavailable
None listed
EX220(BR) V1.0/1.20/1.28/1.29/1.8
Vendor
TP-Link Systems Inc.
Product
EX220(BR) V1.0/1.20/1.28/1.29/1.8
Platforms
Unknown
Default status
unaffected
EX220(BR) V1.0/1.20/1.28/1.29/1.8 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n
Unavailable
None listed
EX220(BR) V2.0
Vendor
TP-Link Systems Inc.
Product
EX220(BR) V2.0
Platforms
Unknown
Default status
unaffected
EX220(BR) V2.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
0.19.0 2.0.0 v609b.0 Build 250814 Rel.49732n
Unavailable
None listed
EX220(EU1) V1.0/1.20
Vendor
TP-Link Systems Inc.
Product
EX220(EU1) V1.0/1.20
Platforms
Unknown
Default status
unaffected
EX220(EU1) V1.0/1.20 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n
Unavailable
None listed
EX220(RU) V1.0
Vendor
TP-Link Systems Inc.
Product
EX220(RU) V1.0
Platforms
Unknown
Default status
unaffected
EX220(RU) V1.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n
Unavailable
None listed
EX220(US1) V1.0
Vendor
TP-Link Systems Inc.
Product
EX220(US1) V1.0
Platforms
Unknown
Default status
unaffected
EX220(US1) V1.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n
Unavailable
None listed
EX222(EU1) V1.0
Vendor
TP-Link Systems Inc.
Product
EX222(EU1) V1.0
Platforms
Unknown
Default status
unaffected
EX222(EU1) V1.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n
Unavailable
None listed
EX222(KR) V1.0
Vendor
TP-Link Systems Inc.
Product
EX222(KR) V1.0
Platforms
Unknown
Default status
unaffected
EX222(KR) V1.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
0.20.0 2.0.0 v609b.0 Build 260427 Rel.16915
Unavailable
None listed
EX222(US1) V1.0
Vendor
TP-Link Systems Inc.
Product
EX222(US1) V1.0
Platforms
Unknown
Default status
unaffected
EX222(US1) V1.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n
Unavailable
None listed
EX520v(EU1)1.0
Vendor
TP-Link Systems Inc.
Product
EX520v(EU1)1.0
Platforms
Unknown
Default status
unaffected
EX520v(EU1)1.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
0.1.0 3.0.0 v60ee.0 Build 250310 Rel.55637n
Unavailable
None listed
EX820v(EU1) V1.0
Vendor
TP-Link Systems Inc.
Product
EX820v(EU1) V1.0
Platforms
Unknown
Default status
unaffected
EX820v(EU1) V1.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
0.4.0 3.1.9 v6087.0 Build 250928 Rel.59674n
Unavailable
None listed
EX920(US2) V1.6/V1.0
Vendor
TP-Link Systems Inc.
Product
EX920(US2) V1.6/V1.0
Platforms
Unknown
Default status
unaffected
EX920(US2) V1.6/V1.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
0.8.0 3.2.2 v6080.0 Build 260309 Rel.54790n
Unavailable
None listed
XX530v(BR)v2.0
Vendor
TP-Link Systems Inc.
Product
XX530v(BR)v2.0
Platforms
Unknown
Default status
unaffected
XX530v(BR)v2.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
0.4.0 3.1.10 v60dc.0 Build 250520 Rel.69748n
Unavailable
None listed
XX530v(EU1)
Vendor
TP-Link Systems Inc.
Product
XX530v(EU1)
Platforms
Unknown
Default status
unaffected
XX530v(EU1) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
0.3.0 3.1.10 v6107.0 Build 250425 Rel.71973n
Unavailable
None listed
XX230v(BR) V1.0
Vendor
TP-Link Systems Inc.
Product
XX230v(BR) V1.0
Platforms
Unknown
Default status
unaffected
XX230v(BR) V1.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
0.16.0 3.0.0 v6066.0 Build 250423 Rel.43799n
Unavailable
None listed
VX800v(DE) V1.0
Vendor
TP-Link Systems Inc.
Product
VX800v(DE) V1.0
Platforms
Unknown
Default status
unaffected
VX800v(DE) V1.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
800.0.16
Unavailable
None listed
VX420-G2h(AU) V3.0
Vendor
TP-Link Systems Inc.
Product
VX420-G2h(AU) V3.0
Platforms
Unknown
Default status
unaffected
VX420-G2h(AU) V3.0 · Scoped product and version facts