HIGH🇵🇱 Wersja polska

CVE-2024-5227

CVSS 7.5v3.1pub. 2024-05-23upd. 2025-08-06

TP-Link Omada ER605 PPTP VPN username Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Omada ER605 routers. Authentication is not required to exploit this vulnerability. However, devices are only vulnerable if configured to use a PPTP VPN with LDAP authentication. The specific flaw exists within the handling of the username parameter provided to the /usr/bin/pppd endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-22446.

CVSS Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Tp Link Omada Er605

    HW
    Tp-Link
    2.6

  • Tp Link Omada Er605 Firmware

    OS
    Tp-Link
    2.2.2
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCEVPNCommand Injection
CWE
References

Related vulnerabilities

CVE-2024-25139CRITICAL10.0PL ✓ten sam produkt

RCE z uprawnieniami root w TP-Link Omada ER605 via buffer overflow

CVE-2024-5228HIGH7.5ten sam produkt

TP-Link Omada ER605 Comexe DDNS Response Handling Heap-based Buffer Overflow Remote Code Execution Vulnerabil...

CVE-2024-5242HIGH7.5ten sam produkt

TP-Link Omada ER605 Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows...

CVE-2024-5243HIGH7.5ten sam produkt

TP-Link Omada ER605 Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adj...

CVE-2024-1180HIGH8.0ten sam produkt

TP-Link Omada ER605 Access Control Command Injection Remote Code Execution Vulnerability. This vulnerability a...