CVE-2022-30075

HighCVSS 8.8/10Last modified Jul 9, 2026

Description

In TP-Link Router AX50 firmware 210730 and older, import of a malicious backup file via web interface can lead to remote code execution due to improper validation.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/167522/TP-Link-AX50-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
https://github.com/aaronsvkThird Party Advisory
https://github.com/aaronsvk/CVE-2022-30075Exploit, Third Party Advisory
https://www.exploit-db.com/exploits/50962Exploit, Third Party Advisory, VDB Entry
http://packetstormsecurity.com/files/167522/TP-Link-AX50-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
https://github.com/aaronsvkThird Party Advisory
https://github.com/aaronsvk/CVE-2022-30075Exploit, Third Party Advisory
https://www.exploit-db.com/exploits/50962Exploit, Third Party Advisory, VDB Entry

Timeline

Published: Jun 9, 2022
Last modified: Jul 9, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-300765.3ENTAB ERP 1.0 allows attackers to discover users' full names via a brute force attack with a series of student usernames such as s10000 thro CVE-2022-300788.8NETGEAR R6200_V2 firmware versions through R6200v2-V1.0.3.12_10.1.11 and R6300_V2 firmware versions through R6300v2-V1.0.4.52_10.0.93 allow CVE-2022-300798.8Command injection vulnerability was discovered in Netgear R6200 v2 firmware through R6200v2-V1.0.3.12 via binary /sbin/acos_service that cou CVE-2022-30088.8The tinygltf library uses the C library function wordexp() to perform file path expansion on untrusted paths that are provided from the inpu CVE-2022-300839.8EllieGrid Android Application version 3.4.1 is vulnerable to Code Injection. The application appears to evaluate user input as code (remote)CVE-2022-30107.5The Priva TopControl Suite contains predictable credentials for the SSH service, based on the Serial number. Which makes it possible for an CVE-2022-301059.8In Belkin N300 Firmware 1.00.08, the script located at /setting_hidden.asp, which is accessible before and after configuring the device, exh CVE-2022-301106.1The file preview functionality in Jirafeau < 4.4.0, which is enabled by default, could be exploited for cross site scripting. An attacker co CVE-2022-301116.8Due to the use of an insecure algorithm for rolling codes in MCK Smartlock 1.0, allows attackers to unlock the mechanism via replay attacks.CVE-2022-301139.8Electronic mall system 1.0_build20200203 is affected vulnerable to SQL Injection.CVE-2022-301147.5A heap-based buffer overflow in a network service in Fastweb FASTGate MediaAccess FGA2130FWB, firmware version 18.3.n.0482_FW_230_FGA2130, a CVE-2022-301154.3Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure clear-text HTTP step even when HTTP is prov