TP-Link m7350 Firmware vulnerabilities

8 CVEs affecting TP-Link m7350 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-37860, published 2022-09-12.

More from TP-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-37860, published 2022-09-12. Critical severity, CVSS 9.8. EPSS: 80.4% chance of exploitation in the next 30 days. The web configuration interface of the TP-Link M7350 V3 with firmware version 190531 is affected by a pre-authentication command injection vulnerability.
• CVE-2019-12104, published 2019-08-14. High severity, CVSS 8.8. EPSS: 4.6% chance of exploitation in the next 30 days. The web-based configuration interface of the TP-Link M7350 V3 with firmware before 190531 is affected by several post-authentication command injection vulnerabilities.
• CVE-2019-12103, published 2019-08-14. Critical severity, CVSS 9.8. EPSS: 3.4% chance of exploitation in the next 30 days. The web-based configuration interface of the TP-Link M7350 V3 with firmware before 190531 is affected by a pre-authentication command injection vulnerability.
• CVE-2019-13651, published 2019-10-24. Critical severity, CVSS 9.8. EPSS: 3% chance of exploitation in the next 30 days. TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow portMappingProtocol OS Command Injection (issue 3 of 5).
• CVE-2019-13652, published 2019-10-24. Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days. TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow serviceName OS Command Injection (issue 4 of 5).
• CVE-2019-13650, published 2019-10-24. Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days. TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow internalPort OS Command Injection (issue 2 of 5).
• CVE-2019-13649, published 2019-10-24. Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days. TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow externalPort OS Command Injection (issue 1 of 5).
• CVE-2019-13653, published 2019-10-24. Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days. TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow triggerPort OS Command Injection (issue 5 of 5).