Tp-link M7350 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Tp-link M7350 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2022-37860 — CVSS 9.8 (critical): The web configuration interface of the TP-Link M7350 V3 with firmware version 190531 is affected by a pre-authentication command injection…
• CVE-2019-12103 — CVSS 9.8 (critical): The web-based configuration interface of the TP-Link M7350 V3 with firmware before 190531 is affected by a pre-authentication command…
• CVE-2019-13649 — CVSS 9.8 (critical): TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow externalPort OS Command Injection (issue 1 of 5).
• CVE-2019-13650 — CVSS 9.8 (critical): TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow internalPort OS Command Injection (issue 2 of 5).
• CVE-2019-13651 — CVSS 9.8 (critical): TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow portMappingProtocol OS Command Injection (issue 3 of 5).
• CVE-2019-13652 — CVSS 9.8 (critical): TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow serviceName OS Command Injection (issue 4 of 5).
• CVE-2019-13653 — CVSS 9.8 (critical): TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow triggerPort OS Command Injection (issue 5 of 5).
• CVE-2019-12104 — CVSS 8.8 (high): The web-based configuration interface of the TP-Link M7350 V3 with firmware before 190531 is affected by several post-authentication…