High · 8.0 CVE-2024-48288 EUVD-2024-43172GHSA-3q2f-pq2q-f9qf

TP-Link TL-IPC42C V4.0_20211227_1.0.16 is vulnerable to command injection due to the lack of malicious code verification on both the fronte…

Published Nov 21, 2024 · Updated Mar 13, 2025 · Assigned by mitre

Description

TP-Link TL-IPC42C V4.0_20211227_1.0.16 is vulnerable to command injection due to the lack of malicious code verification on both the frontend and backend.

References

https://github.com/GroundCTL2MajorTom/pocs/blob/main/Cisco_Linksys_E3000_rce.md
https://github.com/GroundCTL2MajorTom/pocs/blob/main/TP-Link_TL-IPC42C_RCE.md