CVE-2024-5227

TP-Link Omada ER605 PPTP VPN username Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Omada ER605 routers. Authentication is not required to exploit this vulnerability. However, devices are only vulnerable if configured to use a PPTP VPN with LDAP authentication. The specific flaw exists within the handling of the username parameter provided to the /usr/bin/pppd endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-22446.

• CWE-78

• https://www.zerodayinitiative.com/advisories/ZDI-24-499/Third Party Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-24-499/Third Party Advisory

Published

May 23, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-5223The Post Grid Gutenberg Blocks and WordPress Blog Plugin – P…6.4
• CVE-2024-5224The Easy Social Like Box – Popup – Sidebar Widget plugin for…5.4
• CVE-2024-5225An SQL Injection vulnerability exists in the berriai/litellm…7.2
• CVE-2024-5226The Fuse Social Floating Sidebar plugin for WordPress is vul…5.4
• CVE-2024-52268Cross-site scripting vulnerability exists in VK All in One E…4.8
• CVE-2024-52269User Interface (UI) Misrepresentation of Critical Informatio…8.2
• CVE-2024-52270User Interface (UI) Misrepresentation of Critical Informatio…8.2
• CVE-2024-52271User Interface (UI) Misrepresentation of Critical Informatio…8.2
• CVE-2024-52272Stack-based Buffer Overflow vulnerability in Shenzhen Tenda …9.8
• CVE-2024-52273Stack-based Buffer Overflow vulnerability in Shenzhen Tenda …9.8
• CVE-2024-52274Stack-based Buffer Overflow vulnerability in Shenzhen Tenda …9.8
• CVE-2024-52275Stack-based Buffer Overflow vulnerability in Shenzhen Tenda …9.8