Approved changes feed: RSS · Atom

cpe:2.3:o:tp-link:tl-wdr4900_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorTp Link (0b2e1553-ac8b-5981-a60b-ca6c27ee3a6e)
ProductTl Wdr4900 Firmware (62773fa1-e07f-5b97-b3d3-0e6233634cc0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-6487 vulnerable 2026-06-08 05:14:11.698676 Details available
TP-Link WDR Series devices through firmware v3 (such as TL-WDR5620 V3.0) are affected by command injection (after login) leading to remote code execution, because shell metacharacters can be included in the weather get_weather_observe citycode field.
Published: 2019-01-18T10:00:00.000Z
Updated: 2024-09-17T03:22:42.398Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.