therealunicornsecurity/therealunicornsecurity.github.io

therealunicornsecurity/therealunicornsecurity.github.io

GitHubGitHub
GitHubgithub.com
Releases3
Frequency9 months 2 weeks
Last Release
Stars19
Build a Jekyll blog in minutes, without touching the command line.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2020-36178↗
9.8 CRITICAL10 HIGH

oal_ipt_addBridgeIsolationRules on TP-Link TL-WR840N 6_EU_0.9.1_4.16 devices allows OS command injection because a raw string entered from the web interface (an IP address field) is used directly for a call to the system library function (for iptables). NOTE: oal_ipt_addBridgeIsolationRules is not the only function that calls util_execSystem.