← Vulnerability feed

Vulnerability record · CVE-2019-12103 · published 14 August 2019

CVE-2019-12103: Tp-link m7350 firmware os command injection vulnerability

Tp Link · M7350 Firmware

The web-based configuration interface of the TP-Link M7350 V3 with firmware before 190531 is affected by a pre-authentication command injection vulnerability.

9.8 CVSS 3.0 Critical EPSS 3.4% · top 11.7% CWE-78 · OS command injection
9.8CVSS 3.0 base score, v2 10.0
3.4%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

The web-based configuration interface of the TP-Link M7350 V3 with firmware before 190531 is affected by a pre-authentication command injection vulnerability.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.pentestpartners.com/security-blog/cve-2019-12103-analysis-of-a-pre-auth-rce-on-the-tp-link-m7350-with-ghidra Third Party Advisory
https://www.tp-link.com/uk/support/download/m7350/v3/#Firmware PatchVendor Advisory
https://www.pentestpartners.com/security-blog/cve-2019-12103-analysis-of-a-pre-auth-rce-on-the-tp-link-m7350-with-ghidra Third Party Advisory
https://www.tp-link.com/uk/support/download/m7350/v3/#Firmware PatchVendor Advisory

Track CVE-2019-12103 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2022-37860TP-Link M7350 web interface pre-auth OS command injectionThe web configuration interface of the TP-Link M7350 V3 running firmware 190531 is affected by a pre-authentication OS command injection flaw (CWE-78…EPSS 80%analysed9.8CVE-2019-13649Tp-link m7350 firmware os command injection vulnerabilityTP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow externalPort OS Command Injection (issue 1 of 5).EPSS 2.8%9.8CVE-2019-13650Tp-link m7350 firmware os command injection vulnerabilityTP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow internalPort OS Command Injection (issue 2 of 5).EPSS 2.8%9.8CVE-2019-13651Tp-link m7350 firmware os command injection vulnerabilityTP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow portMappingProtocol OS Command Injection (issue 3 of 5).EPSS 3.0%9.8CVE-2019-13652Tp-link m7350 firmware os command injection vulnerabilityTP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow serviceName OS Command Injection (issue 4 of 5).EPSS 2.8%9.8CVE-2019-13653Tp-link m7350 firmware os command injection vulnerabilityTP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow triggerPort OS Command Injection (issue 5 of 5).EPSS 2.1%8.8CVE-2019-12104Tp-link m7350 firmware command injection vulnerabilityThe web-based configuration interface of the TP-Link M7350 V3 with firmware before 190531 is affected by several post-authentication command injectio…EPSS 4.7%8.8CVE-2026-53266Linux kernel ebtables SNAT out-of-bounds write in ARP rewriteThe ebtables SNAT target rewrites the ARP sender hardware address via skb_store_bits() without first making that range writable. When the ARP SHA byt…KEVEPSS 0.65%analysed

Source: NIST National Vulnerability Database (record CVE-2019-12103), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.