CVE-2020-28347: tp-link ac1750_firmware OS Command Injection
Vulnerability summary
CVE-2020-28347 is a high (CVSS 10.0) OS Command Injection vulnerability in tp-link ac1750_firmware. EPSS estimates a 75.41% chance of exploitation in the next 30 days, higher than 99.5% of scored vulnerabilities. 4 public exploits are recorded.
Timeline
- 08-11-2020PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
tdpServer on TP-Link Archer A7 AC1750 devices before 201029 allows remote attackers to execute arbitrary code via the slave_mac parameter. NOTE: this issue exists because of an incomplete fix for CVE-2020-10882 in which shell quotes are mishandled.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
75.41%
Chance of exploitation in the next 30 days
Percentile
100%
Versus all other CVEs
30-day change
-1.21 pp
From 76.62% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
4 foundPoc
Maturity: poc
Exploits And Advisories
Maturity: poc
Metasploit Framework
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Tp-link1 product
- ac1750_firmware< 201029
1 vendor · 1 product
References
5 links- github.com/pedrib/PoC/blob/master/advisories/Pwn2Own/Tokyo_2020/minesweeper.mdX Refsource MISCExploitThird Party Advisory
- github.com/rdomanski/Exploits_and_Advisories/blob/master/advisories/Pwn2Own/Tokyo2020/minesweeper.mdX Refsource MISCExploitThird Party Advisory
- github.com/pedrib/PoC/blob/master/advisories/Pwn2Own/Tokyo_2019/lao_bomb/lao_bomb.mdX Refsource MISCExploitThird Party Advisory
- github.com/rdomanski/Exploits_and_Advisories/blob/master/advisories/Pwn2Own/Tokyo2019/lao_bomb.mdX Refsource MISCExploitThird Party Advisory