Description
An authenticated directory traversal vulnerability in file upload functionality has been identified in Archer MR600 (v2, v3 & v5) and TL-MR6400 v8. Due to insufficient validation of user-supplied file information, an authenticated remote attacker with access to the affected upload functionality could upload a specially crafted file and cause it to be written outside the intended directory. Successful exploitation could allow an authenticated remote attacker to write files to unintended locations, potentially overwriting or modifying files accessible to the affected service; arbitrary code execution has not been demonstrated.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
TP-Link Systems Inc. TL-MR6400 v8
Default version status: unaffected
0 to < 1.5.0 0.9.1 v0001.0 Build 260610 Rel.67978naffected
TP-Link Systems Inc. Archer MR600
Default version status: unaffected
v3 to < MR600(EU)_V3_1.4.0 Build 260827affectedv5 to < MR600(EU)_V5_1.9.0 Build 260805affectedv2 to < MR600(EU)_V2_1.12.0 Build 2600826affected