Approved changes feed: RSS · Atom

cpe:2.3:a:tp-link:tp-link_ex20v_ax1800,_tp-link_archer_c5v_ac1200,_tp-link_td-w9970,_tp-link_td-w9970v3,_tp-link_vx220-g2u,_tp-link_vn020-g2u:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTp Link (0b2e1553-ac8b-5981-a60b-ca6c27ee3a6e)
ProductTp Link Ex20V Ax1800, Tp Link Archer C5V Ac1200, Tp Link Td W9970, Tp Link Td W9970V3, Tp Link Vx220 G2U, Tp Link Vn020 G2U (9f9422af-990c-5fac-a54b-b3466772d28f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-6437 vulnerable 2026-06-08 06:19:47.374130 Authenticated RCE
CRITICAL (9.8)
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TP-Link TP-Link EX20v AX1800, Tp-Link Archer C5v AC1200, Tp-Link TD-W9970, Tp-Link TD-W9970v3, TP-Link VX220-G2u, TP-Link VN020-G2u allows authenticated OS Command Injection. This issue affects TP-Link EX20v AX1800, Tp-Link Archer C5v AC1200, Tp-Link TD-W9970, Tp-Link TD-W9970v3 : through 20240328. Also  the vulnerability continues in the TP-Link VX220-G2u and TP-Link VN020-G2u models due to the products not being produced and supported.
Published: 2024-03-28T13:13:09.097Z
Updated: 2026-05-20T11:17:21.370Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.