CVE-2023-36489 - Vulnerability Details - OpenCVE

Multiple TP-LINK products allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: TL-WR802N firmware versions prior to 'TL-WR802N(JP)_V4_221008', TL-WR841N firmware versions prior to 'TL-WR841N(JP)_V14_230506', and TL-WR902AC firmware versions prior to 'TL-WR902AC(JP)_V3_230506'.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Tp-link	Tl-wr802n Tl-wr802n Firmware Tl-wr841n Tl-wr841n Firmware Tl-wr902ac Tl-wr902ac Firmware

Configuration 1 [-]

AND

cpe:2.3:o:tp-link:tl-wr902ac_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-wr902ac:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:tp-link:tl-wr802n_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-wr802n:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:tp-link:tl-wr841n_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-wr841n:-:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://jvn.jp/en/vu/JVNVU99392903/
https://www.tp-link.com/jp/support/download/tl-wr802n/#Firmware
https://www.tp-link.com/jp/support/download/tl-wr841n/v14/#Firmware
https://www.tp-link.com/jp/support/download/tl-wr902ac/#Firmware

History

Thu, 26 Sep 2024 20:30:00 +0000

Type	Values Removed	Values Added
CPEs		cpe:2.3:o:tp-link:tl-wr802n_firmware:221008:::::::* cpe:2.3:o:tp-link:tl-wr841n_firmware:-:::::::* cpe:2.3:o:tp-link:tl-wr902ac_firmware:-:::::::*
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: jpcert

Published: 2023-09-06T09:35:41.575Z

Updated: 2024-09-26T20:03:19.698Z

Reserved: 2023-08-15T07:33:33.018Z

Link: CVE-2023-36489

Vulnrichment

Updated: 2024-08-02T16:45:56.666Z

NVD

Status : Modified

Published: 2023-09-06T10:15:13.710

Modified: 2024-11-21T08:09:49.150

Link: CVE-2023-36489

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-36489", "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "state": "PUBLISHED", "assignerShortName": "jpcert", "dateReserved": "2023-08-15T07:33:33.018Z", "datePublished": "2023-09-06T09:35:41.575Z", "dateUpdated": "2024-09-26T20:03:19.698Z"}, "containers": {"cna": {"affected": [{"vendor": "TP-LINK", "product": "TL-WR802N", "versions": [{"version": "firmware versions prior to 'TL-WR802N(JP)_V4_221008'", "status": "affected"}]}, {"vendor": "TP-LINK", "product": "TL-WR841N", "versions": [{"version": "firmware versions prior to 'TL-WR841N(JP)_V14_230506'", "status": "affected"}]}, {"vendor": "TP-LINK", "product": "TL-WR902AC", "versions": [{"version": "firmware versions prior to 'TL-WR902AC(JP)_V3_230506'", "status": "affected"}]}], "descriptions": [{"lang": "en", "value": "Multiple TP-LINK products allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: TL-WR802N firmware versions prior to 'TL-WR802N(JP)_V4_221008', TL-WR841N firmware versions prior to 'TL-WR841N(JP)_V14_230506', and TL-WR902AC firmware versions prior to 'TL-WR902AC(JP)_V3_230506'."}], "problemTypes": [{"descriptions": [{"description": "OS command injection", "lang": "en", "type": "text"}]}], "references": [{"url": "https://www.tp-link.com/jp/support/download/tl-wr802n/#Firmware"}, {"url": "https://www.tp-link.com/jp/support/download/tl-wr841n/v14/#Firmware"}, {"url": "https://www.tp-link.com/jp/support/download/tl-wr902ac/#Firmware"}, {"url": "https://jvn.jp/en/vu/JVNVU99392903/"}], "providerMetadata": {"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "shortName": "jpcert", "dateUpdated": "2023-09-06T09:35:41.575Z"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T16:45:56.666Z"}, "title": "CVE Program Container", "references": [{"url": "https://www.tp-link.com/jp/support/download/tl-wr802n/#Firmware", "tags": ["x_transferred"]}, {"url": "https://www.tp-link.com/jp/support/download/tl-wr841n/v14/#Firmware", "tags": ["x_transferred"]}, {"url": "https://www.tp-link.com/jp/support/download/tl-wr902ac/#Firmware", "tags": ["x_transferred"]}, {"url": "https://jvn.jp/en/vu/JVNVU99392903/", "tags": ["x_transferred"]}]}, {"affected": [{"vendor": "tp-link", "product": "tl-wr802n_firmware", "cpes": ["cpe:2.3:o:tp-link:tl-wr802n_firmware:221008:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "221008", "status": "affected", "lessThan": "v4_221008", "versionType": "custom"}]}, {"vendor": "tp-link", "product": "tl-wr841n_firmware", "cpes": ["cpe:2.3:o:tp-link:tl-wr841n_firmware:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "v14_230506", "versionType": "custom"}]}, {"vendor": "tp-link", "product": "tl-wr902ac_firmware", "cpes": ["cpe:2.3:o:tp-link:tl-wr902ac_firmware:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "v3_230506", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-09-26T19:59:52.304215Z", "id": "CVE-2023-36489", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-26T20:03:19.698Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.tp-link.com/jp/support/download/tl-wr802n/#Firmware", "tags": ["x_transferred"]}, {"url": "https://www.tp-link.com/jp/support/download/tl-wr841n/v14/#Firmware", "tags": ["x_transferred"]}, {"url": "https://www.tp-link.com/jp/support/download/tl-wr902ac/#Firmware", "tags": ["x_transferred"]}, {"url": "https://jvn.jp/en/vu/JVNVU99392903/", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T16:45:56.666Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-36489", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-09-26T19:59:52.304215Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:tp-link:tl-wr802n_firmware:221008:*:*:*:*:*:*:*"], "vendor": "tp-link", "product": "tl-wr802n_firmware", "versions": [{"status": "affected", "version": "221008", "lessThan": "v4_221008", "versionType": "custom"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:tp-link:tl-wr841n_firmware:-:*:*:*:*:*:*:*"], "vendor": "tp-link", "product": "tl-wr841n_firmware", "versions": [{"status": "affected", "version": "0", "lessThan": "v14_230506", "versionType": "custom"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:tp-link:tl-wr902ac_firmware:-:*:*:*:*:*:*:*"], "vendor": "tp-link", "product": "tl-wr902ac_firmware", "versions": [{"status": "affected", "version": "0", "lessThan": "v3_230506", "versionType": "custom"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-26T20:03:11.980Z"}}], "cna": {"affected": [{"vendor": "TP-LINK", "product": "TL-WR802N", "versions": [{"status": "affected", "version": "firmware versions prior to 'TL-WR802N(JP)_V4_221008'"}]}, {"vendor": "TP-LINK", "product": "TL-WR841N", "versions": [{"status": "affected", "version": "firmware versions prior to 'TL-WR841N(JP)_V14_230506'"}]}, {"vendor": "TP-LINK", "product": "TL-WR902AC", "versions": [{"status": "affected", "version": "firmware versions prior to 'TL-WR902AC(JP)_V3_230506'"}]}], "references": [{"url": "https://www.tp-link.com/jp/support/download/tl-wr802n/#Firmware"}, {"url": "https://www.tp-link.com/jp/support/download/tl-wr841n/v14/#Firmware"}, {"url": "https://www.tp-link.com/jp/support/download/tl-wr902ac/#Firmware"}, {"url": "https://jvn.jp/en/vu/JVNVU99392903/"}], "descriptions": [{"lang": "en", "value": "Multiple TP-LINK products allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: TL-WR802N firmware versions prior to 'TL-WR802N(JP)_V4_221008', TL-WR841N firmware versions prior to 'TL-WR841N(JP)_V14_230506', and TL-WR902AC firmware versions prior to 'TL-WR902AC(JP)_V3_230506'."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "OS command injection"}]}], "providerMetadata": {"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "shortName": "jpcert", "dateUpdated": "2023-09-06T09:35:41.575Z"}}}, "cveMetadata": {"cveId": "CVE-2023-36489", "state": "PUBLISHED", "dateUpdated": "2024-09-26T20:03:19.698Z", "dateReserved": "2023-08-15T07:33:33.018Z", "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "datePublished": "2023-09-06T09:35:41.575Z", "assignerShortName": "jpcert"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:tl-wr902ac_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "3376E9AB-5749-4129-BF47-B9378E073B5A", "versionEndExcluding": "230506", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:tl-wr902ac:-:*:*:*:*:*:*:*", "matchCriteriaId": "5541D281-8231-4724-BF9B-4E0FF61215A0", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:tl-wr802n_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "EC40A74F-6DCC-4DEB-A38F-D293BE80303F", "versionEndExcluding": "221008", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:tl-wr802n:-:*:*:*:*:*:*:*", "matchCriteriaId": "2E1B4F55-1FCF-4557-A051-2EBC1414DD00", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:tl-wr841n_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "93ED2916-46C6-43BE-A163-4AC82874869A", "versionEndExcluding": "230506", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:tl-wr841n:-:*:*:*:*:*:*:*", "matchCriteriaId": "AD44582F-0CC5-4A71-8FE8-2BEF65EB717E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Multiple TP-LINK products allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: TL-WR802N firmware versions prior to 'TL-WR802N(JP)_V4_221008', TL-WR841N firmware versions prior to 'TL-WR841N(JP)_V14_230506', and TL-WR902AC firmware versions prior to 'TL-WR902AC(JP)_V3_230506'."}, {"lang": "es", "value": "M\u00faltiples productos TP-LINK permiten que un atacante no autenticado adyacente a la red ejecute comandos arbitrarios del sistema operativo. Los productos/versiones afectados son los siguientes: versiones de firmware del TL-WR802N anteriores a 'TL-WR802N(JP)_V4_221008', versiones de firmware del TL-WR841N anteriores a 'TL-WR841N(JP)_V14_230506' y versiones de firmware del TL-WR902AC anteriores a 'TL-WR902AC(JP)_V3_230506'.\n"}], "id": "CVE-2023-36489", "lastModified": "2024-11-21T08:09:49.150", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-09-06T10:15:13.710", "references": [{"source": "vultures@jpcert.or.jp", "tags": ["Third Party Advisory"], "url": "https://jvn.jp/en/vu/JVNVU99392903/"}, {"source": "vultures@jpcert.or.jp", "tags": ["Product"], "url": "https://www.tp-link.com/jp/support/download/tl-wr802n/#Firmware"}, {"source": "vultures@jpcert.or.jp", "tags": ["Product"], "url": "https://www.tp-link.com/jp/support/download/tl-wr841n/v14/#Firmware"}, {"source": "vultures@jpcert.or.jp", "tags": ["Product"], "url": "https://www.tp-link.com/jp/support/download/tl-wr902ac/#Firmware"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://jvn.jp/en/vu/JVNVU99392903/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Product"], "url": "https://www.tp-link.com/jp/support/download/tl-wr802n/#Firmware"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Product"], "url": "https://www.tp-link.com/jp/support/download/tl-wr841n/v14/#Firmware"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Product"], "url": "https://www.tp-link.com/jp/support/download/tl-wr902ac/#Firmware"}], "sourceIdentifier": "vultures@jpcert.or.jp", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-78"}], "source": "nvd@nist.gov", "type": "Primary"}]}