Approved changes feed: RSS · Atom

cpe:2.3:o:tp-link:er7206_firmware:1.3.0:build_20230322_rel_70591:*:*:*:*:*:*

part: o version: 1.3.0 update: build_20230322_rel_70591

VendorTp Link (0b2e1553-ac8b-5981-a60b-ca6c27ee3a6e)
ProductEr7206 Firmware (80da42fc-396f-5f7f-8e7b-07291ab795a4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-47618 vulnerable 2026-06-08 06:14:25.203121 Details available
HIGH (7.2)
A post authentication command execution vulnerability exists in the web filtering functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Published: 2024-02-06T16:20:12.604Z
Updated: 2025-11-04T18:19:06.288Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47617 vulnerable 2026-06-08 06:14:25.202429 Details available
HIGH (7.2)
A post authentication command injection vulnerability exists when configuring the web group member of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Published: 2024-02-06T16:20:13.079Z
Updated: 2025-11-04T18:19:05.029Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47209 vulnerable 2026-06-08 06:14:24.259130 Details available
HIGH (7.2)
A post authentication command injection vulnerability exists in the ipsec policy functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Published: 2024-02-06T16:20:14.973Z
Updated: 2025-11-04T18:19:02.658Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47167 vulnerable 2026-06-08 06:14:24.136522 Details available
HIGH (7.2)
A post authentication command injection vulnerability exists in the GRE policy functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Published: 2024-02-06T16:20:14.536Z
Updated: 2025-11-04T18:18:59.988Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46683 vulnerable 2026-06-08 06:14:22.749361 Details available
HIGH (7.2)
A post authentication command injection vulnerability exists when configuring the wireguard VPN functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection . An attacker can make an authenticated HTTP request to trigger this vulnerability.
Published: 2024-02-06T16:20:13.525Z
Updated: 2025-11-04T18:18:47.927Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43482 vulnerable 2026-06-08 06:12:31.591472 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42664 vulnerable 2026-06-08 06:11:08.857262 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-36498 vulnerable 2026-06-08 06:08:12.088049 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.