cve/2022/CVE-2022-30075.md

CVE-2022-30075

Description

In TP-Link Router AX50 firmware 210730 and older, import of a malicious backup file via web interface can lead to remote code execution due to improper validation.

POC

Reference

• http://packetstormsecurity.com/files/167522/TP-Link-AX50-Remote-Code-Execution.html
• https://github.com/aaronsvk
• https://github.com/aaronsvk/CVE-2022-30075
• https://www.exploit-db.com/exploits/50962

Github

• https://github.com/0xMarcio/cve
• https://github.com/ARPSyndicate/cvemon
• https://github.com/CVEDB/awesome-cve-repo
• https://github.com/CVEDB/top
• https://github.com/GhostTroops/TOP
• https://github.com/H4lo/awesome-IoT-security-article
• https://github.com/JERRY123S/all-poc
• https://github.com/M4fiaB0y/CVE-2022-30075
• https://github.com/Mr-xn/Penetration_Testing_POC
• https://github.com/NaInSec/CVE-PoC-in-GitHub
• https://github.com/SAJIDAMINE/CVE-2022-30075
• https://github.com/SYRTI/POC_to_review
• https://github.com/Tig3rHu/Awesome_IOT_Vul_lib
• https://github.com/Tig3rHu/MessageForV
• https://github.com/WhooAmii/POC_to_review
• https://github.com/aaronsvk/CVE-2022-30075
• https://github.com/cyberanand1337x/bug-bounty-2022
• https://github.com/gscamelo/TP-Link-Archer-AX10-V1
• https://github.com/hktalent/TOP
• https://github.com/jbmihoub/all-poc
• https://github.com/k0mi-tg/CVE-POC
• https://github.com/lions2012/Penetration_Testing_POC
• https://github.com/manas3c/CVE-POC
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/trhacknon/CVE-2022-30075
• https://github.com/trhacknon/Pocingit
• https://github.com/usdogu/awesome-stars
• https://github.com/whoforget/CVE-POC
• https://github.com/xuetusummer/Penetration_Testing_POC
• https://github.com/youwizard/CVE-POC
• https://github.com/zecool/cve