CVE-2023-36489

Summary

CVE-2023-36489 is a newly disclosed vulnerability affecting multiple TP-Link products. This issue permits network-adjacent, unauthenticated attackers to execute arbitrary OS commands. Specifically impacted are the TL-WR802N with firmware versions prior to 'TL-WR802N(JP)_V4_221008', the TL-WR841N with firmware versions prior to 'TL-WR841N(JP)_V14_230506', and the TL-WR902AC with firmware versions prior to 'TL-WR902AC(JP)_V3_230506'. Successful exploitation could lead to significant compromise of these devices, making it essential for users to apply available patches promptly.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.