Unscored CVE-2023-40193 EUVD-2023-44791GHSA-98mx-x9g2-pmch

Deco M4 firmware versions prior to 'Deco M4(JP)_V2_1.5.8 Build 20230619' allows a network-adjacent authenticated attacker to execute arbitr…

Published Sep 6, 2023 · Updated Sep 26, 2024 · Assigned by jpcert

Vendor: TP-Link Systems Product: Deco M4 Category: Network devices

Description

Deco M4 firmware versions prior to 'Deco M4(JP)_V2_1.5.8 Build 20230619' allows a network-adjacent authenticated attacker to execute arbitrary OS commands.

Affected products

Vendor	Product	Affected	Fixed
TP-LINK	Deco M4	firmware versions prior to 'Deco M4(JP)_V2_1.5.8 Build 20230619'	—

References

https://www.tp-link.com/jp/support/download/deco-m4/v2/#Firmware
https://jvn.jp/en/vu/JVNVU99392903/