CVE-2023-33538

Summary

CVE-2023-33538 is a newly disclosed command injection vulnerability affecting select TP-Link routers, specifically the TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2. The issue is located within the /userRpm/WlanNetworkRpm component, allowing unauthenticated attackers to inject and execute arbitrary commands on the affected devices. Successful exploitation could result in significant compromise, including unauthorized access, data theft, or denial-of-service attacks. Users are advised to update their routers with the latest firmware as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.