← Vulnerability feed

Vulnerability record · CVE-2019-13653 · published 24 October 2019

CVE-2019-13653: Tp-link m7350 firmware os command injection vulnerability

Tp Link · M7350 Firmware

TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow triggerPort OS Command Injection (issue 5 of 5).

9.8 CVSS 3.1 Critical EPSS 2.1% · top 19.1% CWE-78 · OS command injection
9.8CVSS 3.1 base score, v2 10.0
2.1%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow triggerPort OS Command Injection (issue 5 of 5).

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://pastebin.com/yAxBFe05 Not ApplicableThird Party Advisory
https://pastebin.com/yAxBFe05 Not ApplicableThird Party Advisory

Track CVE-2019-13653 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2022-37860TP-Link M7350 web interface pre-auth OS command injectionThe web configuration interface of the TP-Link M7350 V3 running firmware 190531 is affected by a pre-authentication OS command injection flaw (CWE-78…EPSS 80%analysed9.8CVE-2019-13649Tp-link m7350 firmware os command injection vulnerabilityTP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow externalPort OS Command Injection (issue 1 of 5).EPSS 2.8%9.8CVE-2019-13650Tp-link m7350 firmware os command injection vulnerabilityTP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow internalPort OS Command Injection (issue 2 of 5).EPSS 2.8%9.8CVE-2019-13651Tp-link m7350 firmware os command injection vulnerabilityTP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow portMappingProtocol OS Command Injection (issue 3 of 5).EPSS 3.0%9.8CVE-2019-13652Tp-link m7350 firmware os command injection vulnerabilityTP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow serviceName OS Command Injection (issue 4 of 5).EPSS 2.8%9.8CVE-2019-12103Tp-link m7350 firmware os command injection vulnerabilityThe web-based configuration interface of the TP-Link M7350 V3 with firmware before 190531 is affected by a pre-authentication command injection vulne…EPSS 3.4%8.8CVE-2019-12104Tp-link m7350 firmware command injection vulnerabilityThe web-based configuration interface of the TP-Link M7350 V3 with firmware before 190531 is affected by several post-authentication command injectio…EPSS 4.7%8.8CVE-2026-86950Apple ipados out-of-bounds write vulnerabilityAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, …KEV

Source: NIST National Vulnerability Database (record CVE-2019-13653), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.