TP-LINK AC1750 A7 190726 tmpServer Service os command injection

Summaryinfo

A vulnerability, which was classified as critical, has been found in TP-LINK AC1750 A7 190726. The affected element is an unknown function of the component tmpServer Service. The manipulation leads to os command injection. This vulnerability is traded as CVE-2020-10886. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to apply restrictive firewalling.

Detailsinfo

A vulnerability was found in TP-LINK AC1750 A7 190726 (Router Operating System). It has been rated as critical. This issue affects an unknown functionality of the component tmpServer Service. The manipulation with an unknown input leads to a os command injection vulnerability. Using CWE to declare the problem leads to CWE-78. The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the tmpServer service, which listens on TCP port 20002. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9662.

The weakness was shared 03/25/2020. The identification of this vulnerability is CVE-2020-10886 since 03/24/2020. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1202 according to MITRE ATT&CK.

Addressing this vulnerability is possible by firewalling tcp/20002.

The entries VDB-152281, VDB-152280, VDB-152278 and VDB-152277 are related to this item. Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Router Operating System

Vendor

• TP-LINK

Name

• AC1750

Version

• A7 190726

License

• commercial

Website

• Vendor: https://www.tp-link.com/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion