Approved changes feed: RSS · Atom

cpe:2.3:o:tp-link:tl-er5120g_firmware:2.0.0:build_210817:*:*:*:*:*:*

part: o version: 2.0.0 update: build_210817

VendorTp Link (0b2e1553-ac8b-5981-a60b-ca6c27ee3a6e)
ProductTl Er5120G Firmware (36c14af8-8f41-563d-b95c-6a28e032fec4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-43138 vulnerable 2026-06-08 06:11:10.975494 Details available
TPLINK TL-ER5120G 4.0 2.0.0 Build 210817 Rel.80868n has a command injection vulnerability, when an attacker adds NAPT rules after authentication, and the rule name has an injection point.
Published: 2023-09-20T00:00:00.000Z
Updated: 2024-09-25T13:46:50.365Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43137 vulnerable 2026-06-08 06:11:10.974870 Details available
TPLINK TL-ER5120G 4.0 2.0.0 Build 210817 Rel.80868n has a command injection vulnerability, when an attacker adds ACL rules after authentication, and the rule name parameter has injection points.
Published: 2023-09-20T00:00:00.000Z
Updated: 2024-09-25T14:28:00.899Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43135 vulnerable 2026-06-08 06:11:10.973089 Details available
There is an unauthorized access vulnerability in TP-LINK ER5120G 4.0 2.0.0 Build 210817 Rel.80868n, which allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management.
Published: 2023-09-20T00:00:00.000Z
Updated: 2024-09-25T14:14:11.051Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.