Vulnerability Description
Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer AX50 firmware versions prior to 'Archer AX50(JP)_V1_230529', Archer A10 firmware versions prior to 'Archer A10(JP)_V2_230504', Archer AX10 firmware versions prior to 'Archer AX10(JP)_V1.2_230508', and Archer AX11000 firmware versions prior to 'Archer AX11000(JP)_V1_230523'.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Tp-Link | Archer Ax50 Firmware | < 230529 |
| Tp-Link | Archer Ax50 | 1.0 |
| Tp-Link | Archer A10 Firmware | <= 230504 |
| Tp-Link | Archer A10 | - |
| Tp-Link | Archer Ax10 Firmware | < 230508 |
| Tp-Link | Archer Ax10 | - |
| Tp-Link | Archer Ax11000 Firmware | < 230523 |
| Tp-Link | Archer Ax11000 | - |
Related Weaknesses (CWE)
References
- https://jvn.jp/en/vu/JVNVU99392903/Third Party Advisory
- https://www.tp-link.com/jp/support/download/archer-a10/#FirmwareProduct
- https://www.tp-link.com/jp/support/download/archer-ax10/#FirmwareProduct
- https://www.tp-link.com/jp/support/download/archer-ax11000/#FirmwareProduct
- https://www.tp-link.com/jp/support/download/archer-ax50/#FirmwareProduct
- https://jvn.jp/en/vu/JVNVU99392903/Third Party Advisory
- https://www.tp-link.com/jp/support/download/archer-a10/#FirmwareProduct
- https://www.tp-link.com/jp/support/download/archer-ax10/#FirmwareProduct
- https://www.tp-link.com/jp/support/download/archer-ax11000/#FirmwareProduct
- https://www.tp-link.com/jp/support/download/archer-ax50/#FirmwareProduct
FAQ
What is CVE-2023-40357?
CVE-2023-40357 is a vulnerability with a CVSS score of 8.0 (HIGH). Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer AX50 firmware versions prior to 'Archer AX...
How severe is CVE-2023-40357?
CVE-2023-40357 has been rated HIGH with a CVSS base score of 8.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-40357?
Check the references section above for vendor advisories and patch information. Affected products include: Tp-Link Archer Ax50 Firmware, Tp-Link Archer Ax50, Tp-Link Archer A10 Firmware, Tp-Link Archer A10, Tp-Link Archer Ax10 Firmware.