Approved changes feed: RSS · Atom

cpe:2.3:o:tp-link:tl-wdr5620_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorTp Link (0b2e1553-ac8b-5981-a60b-ca6c27ee3a6e)
ProductTl Wdr5620 Firmware (8c12512e-8a0f-5673-9594-2b232a07e121)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-6487 vulnerable 2026-06-08 05:14:11.692793 Details available
TP-Link WDR Series devices through firmware v3 (such as TL-WDR5620 V3.0) are affected by command injection (after login) leading to remote code execution, because shell metacharacters can be included in the weather get_weather_observe citycode field.
Published: 2019-01-18T10:00:00.000Z
Updated: 2024-09-17T03:22:42.398Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.