Advisories · Technology
TP-Link Systems Inc. Festa gateways.
Every CVE that names TP-Link Systems Inc. Festa gateways among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
Unauthorized root access via debug functionality
- TP-Link Systems Inc. Omada gateways
- TP-Link Systems Inc. Festa gateways
- Privilege escalation
- CVSS 9.3 CriticalCritical · CVSS 9+
Authenticated OS command execution
- TP-Link Systems Inc. Omada gateways
- TP-Link Systems Inc. Festa gateways
- Command injection
- CVSS 9.3 CriticalCritical · CVSS 9+
OS command injection in multiple parameters
- TP-Link Systems Inc. Omada gateways
- TP-Link Systems Inc. Festa gateways
- Command injection
- CVSS 8.6 High
OS command injection using information obtained from the web management interface
- TP-Link Systems Inc. Omada gateways
- TP-Link Systems Inc. Festa gateways
- Command injection