CVE-2023-40357 - OpenCVE

Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer AX50 firmware versions prior to 'Archer AX50(JP)_V1_230529', Archer A10 firmware versions prior to 'Archer A10(JP)_V2_230504', Archer AX10 firmware versions prior to 'Archer AX10(JP)_V1.2_230508', and Archer AX11000 firmware versions prior to 'Archer AX11000(JP)_V1_230523'.

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

Vendors & Products
CPE Configurations

Vendors	Products
Tp-link	Archer A10 Archer Ax11000 Firmware Archer Ax11000 Archer Ax10 Firmware Archer Ax50 Firmware Archer Ax10 Archer Ax50 Archer A10 Firmware

Configuration 1 [-]

AND

cpe:2.3:o:tp-link:archer_ax50_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:archer_ax50:1.0:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:tp-link:archer_a10_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:archer_a10:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:tp-link:archer_ax10_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:archer_ax10:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND

cpe:2.3:o:tp-link:archer_ax11000_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:archer_ax11000:-:*:*:*:*:*:*:*

References

Link	Resource
https://jvn.jp/en/vu/JVNVU99392903/	Third Party Advisory
https://www.tp-link.com/jp/support/download/archer-a10/#Firmware	Product
https://www.tp-link.com/jp/support/download/archer-ax10/#Firmware	Product
https://www.tp-link.com/jp/support/download/archer-ax11000/#Firmware	Product
https://www.tp-link.com/jp/support/download/archer-ax50/#Firmware	Product

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: jpcert

Published: 2023-09-06T09:21:35.820Z

Updated: 2023-09-06T09:21:35.820Z

Reserved: 2023-08-15T07:33:34.791Z

Link: CVE-2023-40357

JSON object: View

NVD Information

Status : Analyzed

Published: 2023-09-06T10:15:14.820

Modified: 2023-09-11T13:42:13.197

Link: CVE-2023-40357

JSON object: View

Redhat Information

No data.

CWE

CWE-78

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:archer_ax50_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6FED5A58-CE05-4048-AD76-985B28F1E059", "versionEndExcluding": "230529", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:archer_ax50:1.0:*:*:*:*:*:*:*", "matchCriteriaId": "CAFA093D-FBF5-4B8D-87FD-DA09B0EEF9C8", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:archer_a10_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "DC497214-6875-43D7-A8FB-9E6B2D307DE9", "versionEndIncluding": "230504", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:archer_a10:-:*:*:*:*:*:*:*", "matchCriteriaId": "617EFAC4-CAB1-41FB-BC30-29ED4A84D74A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:archer_ax10_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "3DC73D06-13CF-47C5-81C4-37C8348CED43", "versionEndExcluding": "230508", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:archer_ax10:-:*:*:*:*:*:*:*", "matchCriteriaId": "307B80ED-EEBB-4378-ADA3-B9E821AA3B36", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:archer_ax11000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A5D83433-6BAB-42DB-A0DB-F4C95F7E7BDE", "versionEndExcluding": "230523", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:archer_ax11000:-:*:*:*:*:*:*:*", "matchCriteriaId": "75171CD1-0D58-472F-AA60-A990FCA157DA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer AX50 firmware versions prior to 'Archer AX50(JP)_V1_230529', Archer A10 firmware versions prior to 'Archer A10(JP)_V2_230504', Archer AX10 firmware versions prior to 'Archer AX10(JP)_V1.2_230508', and Archer AX11000 firmware versions prior to 'Archer AX11000(JP)_V1_230523'."}, {"lang": "es", "value": "M\u00faltiples productos TP-LINK permiten que un atacante autenticado adyacente a la red ejecute comandos arbitrarios del sistema operativo. Los productos/versiones afectados son los siguientes: Versiones de firmware de Archer AX50 anteriores a 'Archer AX50(JP)_V1_230529', Versiones de firmware de Archer A10 anteriores a 'Archer A10(JP)_V2_230504', Versiones de firmware de Archer AX10 anteriores a 'Archer AX10(JP) _V1.2_230508' y versiones de firmware de Archer AX11000 anteriores a 'Archer AX11000(JP)_V1_230523'.\n"}], "id": "CVE-2023-40357", "lastModified": "2023-09-11T13:42:13.197", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.1, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-09-06T10:15:14.820", "references": [{"source": "vultures@jpcert.or.jp", "tags": ["Third Party Advisory"], "url": "https://jvn.jp/en/vu/JVNVU99392903/"}, {"source": "vultures@jpcert.or.jp", "tags": ["Product"], "url": "https://www.tp-link.com/jp/support/download/archer-a10/#Firmware"}, {"source": "vultures@jpcert.or.jp", "tags": ["Product"], "url": "https://www.tp-link.com/jp/support/download/archer-ax10/#Firmware"}, {"source": "vultures@jpcert.or.jp", "tags": ["Product"], "url": "https://www.tp-link.com/jp/support/download/archer-ax11000/#Firmware"}, {"source": "vultures@jpcert.or.jp", "tags": ["Product"], "url": "https://www.tp-link.com/jp/support/download/archer-ax50/#Firmware"}], "sourceIdentifier": "vultures@jpcert.or.jp", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-78"}], "source": "nvd@nist.gov", "type": "Primary"}]}