Back to the CVE list
CVE-2023-1389 CISA KEV · Actively exploited

TP-Link Archer AX-21 Command Injection Vulnerability

CVSS score

—

EPSS probability

%100.0

Risk score

—

Published

3 y ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

TP-Link Archer AX21 - Unauthenticated Command Injection [Loader] (★0)

Public PoCSource updated: 10.09.2023 00:54:18

TP-Link Archer AX21 - Unauthenticated Command Injection [Loader] (★0)

Public PoCSource updated: 25.12.2023 20:40:47

TP-Link Archer AX21 Command Injection Exploit (CVE-2023-1389) This script exploits a command injection vulnerability in TP-Link Archer AX21 routers through the unvalidated 'country' parameter in the web interface. It allows unauthenticated attackers to execute arbitrary commands with root privileges. (★0)

Public PoCSource updated: 26.04.2025 19:20:52

TP-Link Archer AX21 - Unauthenticated Command Injection

Exploit referenceSource updated: 10.08.2023 00:00:00

Nuclei: TP-Link Archer AX21 (AX1800) - Unauthenticated Command Injection

Exploit reference

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2023-1389"