CVE-2021-42232
Last modified
CVE-2021-42232 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. TP-Link Archer A7 Archer A7(US)_V5_210519 is affected by a command injection vulnerability in /usr/bin/tddp. The vulnerability is caused by the program taking part of the received data packet as part of the command. EPSS estimates a 3.17% chance of exploitation in the next 30 days.
Description
TP-Link Archer A7 Archer A7(US)_V5_210519 is affected by a command injection vulnerability in /usr/bin/tddp. The vulnerability is caused by the program taking part of the received data packet as part of the command. This will cause an attacker to execute arbitrary commands on the router.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Tp-Link | Archer A7 Firmware | 210519 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-42232?
How severe is CVE-2021-42232?
How do I fix CVE-2021-42232?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-42220A Cross Site Scripting (XSS) vulnerability exists in Dolibar…5.4
- CVE-2021-42223Cross Site Scripting (XSS).vulnerability exists in Online DJ…6.1
- CVE-2021-42224SQL Injection vulnerability exists in IFSC Code Finder Proje…9.8
- CVE-2021-42227Cross SIte Scripting (XSS) vulnerability exists in KindEdito…6.1
- CVE-2021-42228A Cross Site Request Forgery (CSRF) vulnerability exists in …8.8
- CVE-2021-42230Seowon 130-SLC router all versions as of 2021-09-15 is vulne…9.8
- CVE-2021-42233The Simple Blog plugin in Wondercms 3.4.1 is vulnerable to s…5.4
- CVE-2021-42235SQL injection in osTicket before 1.14.8 and 1.15.4 login and…9.8
- CVE-2021-42237Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 …9.8
- CVE-2021-42242A command execution vulnerability exists in jfinal_cms 5.0.1…9.8
- CVE-2021-42244A cross-site scripting (XSS) vulnerability in PaquitoSoftwar…6.1
- CVE-2021-42245FlatCore-CMS 2.0.9 has a cross-site scripting (XSS) vulnerab…6.1
Are you affected by CVE-2021-42232?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST