Approved changes feed: RSS · Atom

cpe:2.3:o:tp-link:er7206_firmware:1.3.0_build_20230322_rel.70591:*:*:*:*:*:*:*

part: o version: 1.3.0_build_20230322_rel.70591 update: *

VendorTp Link (0b2e1553-ac8b-5981-a60b-ca6c27ee3a6e)
ProductEr7206 Firmware (80da42fc-396f-5f7f-8e7b-07291ab795a4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-46683 vulnerable 2026-06-08 06:14:22.746643 Details available
HIGH (7.2)
A post authentication command injection vulnerability exists when configuring the wireguard VPN functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection . An attacker can make an authenticated HTTP request to trigger this vulnerability.
Published: 2024-02-06T16:20:13.525Z
Updated: 2025-11-04T18:18:47.927Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.