TP-Link Archer AX-21 Command Injection Vulnerability

cve CVE-2023-1389 2 sources, 2 claims · Watch

CISA Known Exploited Vulnerabilities writes:
TP-Link Archer AX-21 Command Injection Vulnerability TP-Link Archer AX-21 contains a command injection vulnerability that allows for remote code execution. Apply updates per vendor instructions. https://www.tp-link.com/us/support/download/archer-ax21/v3/#Firmware; https://nvd.nist.gov/vuln/detail/CVE-2023-1389 the claim

What each source says

PropertySourceSaidMeans here
Author
author
Exploit-DBVoyag3r
receipt
Source
Exploit-DB
Its words
Voyag3r
Read by
field:author
Said since
2026-09-29 09:40 UTC
Last answered
2026-10-03 00:04 UTC
Original
open at the source
What the source handed over
{
  "aliases": "",
  "application_url": "",
  "author": "Voyag3r",
  "codes": "CVE-2023-1389",
  "date_added": "2023-08-10",
  "date_published": "2023-08-10",
  "date_updated": "2023-08-10",
  "description": "TP-Link Archer AX21 - Unauthenticated Command Injection",
  "file": "exploits/hardware/remote/51677.py",
  "id": "51677",
  "platform": "hardware",
  "port": "",
  "screenshot_url": "",
  "source_url": "",
  "tags": "",
  "type": "remote",
  "verified": "0"
}
—
Cwes
cwes
CISA Known Exploited VulnerabilitiesCWE-77
receipt
Source
CISA Known Exploited Vulnerabilities
Its words
CWE-77
Read by
field:cwes
Said since
2026-09-28 11:44 UTC
Last answered
2026-10-03 03:06 UTC
What the source handed over
{
  "cveID": "CVE-2023-1389",
  "cwes": "CWE-77",
  "dateAdded": "2023-05-01",
  "dueDate": "2023-05-22",
  "forensicTriage": "No",
  "knownRansomwareCampaignUse": "Unknown",
  "notes": "https://www.tp-link.com/us/support/download/archer-ax21/v3/#Firmware;  https://nvd.nist.gov/vuln/detail/CVE-2023-1389",
  "product": "Archer AX21",
  "requiredAction": "Apply updates per vendor instructions.",
  "shortDescription": "TP-Link Archer AX-21 contains a command injection vulnerability that allows for remote code execution.",
  "vendorProject": "TP-Link",
  "vulnerabilityName": "TP-Link Archer AX-21 Command Injection Vulnerability"
}
—
Due date
due_date
CISA Known Exploited Vulnerabilities2023-05-22
receipt
Source
CISA Known Exploited Vulnerabilities
Its words
2023-05-22
Read by
field:dueDate
Said since
2026-09-28 11:44 UTC
Last answered
2026-10-03 03:06 UTC
What the source handed over
{
  "cveID": "CVE-2023-1389",
  "cwes": "CWE-77",
  "dateAdded": "2023-05-01",
  "dueDate": "2023-05-22",
  "forensicTriage": "No",
  "knownRansomwareCampaignUse": "Unknown",
  "notes": "https://www.tp-link.com/us/support/download/archer-ax21/v3/#Firmware;  https://nvd.nist.gov/vuln/detail/CVE-2023-1389",
  "product": "Archer AX21",
  "requiredAction": "Apply updates per vendor instructions.",
  "shortDescription": "TP-Link Archer AX-21 contains a command injection vulnerability that allows for remote code execution.",
  "vendorProject": "TP-Link",
  "vulnerabilityName": "TP-Link Archer AX-21 Command Injection Vulnerability"
}
—
Exploited
exploited
CISA Known Exploited Vulnerabilitiesyes
receipt
Source
CISA Known Exploited Vulnerabilities
Its words
yes
Read by
const:yes
Said since
2026-09-28 11:44 UTC
Last answered
2026-10-03 03:06 UTC
What the source handed over
{
  "cveID": "CVE-2023-1389",
  "cwes": "CWE-77",
  "dateAdded": "2023-05-01",
  "dueDate": "2023-05-22",
  "forensicTriage": "No",
  "knownRansomwareCampaignUse": "Unknown",
  "notes": "https://www.tp-link.com/us/support/download/archer-ax21/v3/#Firmware;  https://nvd.nist.gov/vuln/detail/CVE-2023-1389",
  "product": "Archer AX21",
  "requiredAction": "Apply updates per vendor instructions.",
  "shortDescription": "TP-Link Archer AX-21 contains a command injection vulnerability that allows for remote code execution.",
  "vendorProject": "TP-Link",
  "vulnerabilityName": "TP-Link Archer AX-21 Command Injection Vulnerability"
}
—
Forensic triage
forensic_triage
CISA Known Exploited Vulnerabilitiesfalse
receipt
Source
CISA Known Exploited Vulnerabilities
Its words
No
Read by
field:forensicTriage
Said since
2026-09-28 11:44 UTC
Last answered
2026-10-03 03:06 UTC
What the source handed over
{
  "cveID": "CVE-2023-1389",
  "cwes": "CWE-77",
  "dateAdded": "2023-05-01",
  "dueDate": "2023-05-22",
  "forensicTriage": "No",
  "knownRansomwareCampaignUse": "Unknown",
  "notes": "https://www.tp-link.com/us/support/download/archer-ax21/v3/#Firmware;  https://nvd.nist.gov/vuln/detail/CVE-2023-1389",
  "product": "Archer AX21",
  "requiredAction": "Apply updates per vendor instructions.",
  "shortDescription": "TP-Link Archer AX-21 contains a command injection vulnerability that allows for remote code execution.",
  "vendorProject": "TP-Link",
  "vulnerabilityName": "TP-Link Archer AX-21 Command Injection Vulnerability"
}
—
Known ransomware campaign use
known_ransomware_campaign_use
CISA Known Exploited VulnerabilitiesUnknown
receipt
Source
CISA Known Exploited Vulnerabilities
Its words
Unknown
Read by
field:knownRansomwareCampaignUse
Said since
2026-09-28 11:44 UTC
Last answered
2026-10-03 03:06 UTC
What the source handed over
{
  "cveID": "CVE-2023-1389",
  "cwes": "CWE-77",
  "dateAdded": "2023-05-01",
  "dueDate": "2023-05-22",
  "forensicTriage": "No",
  "knownRansomwareCampaignUse": "Unknown",
  "notes": "https://www.tp-link.com/us/support/download/archer-ax21/v3/#Firmware;  https://nvd.nist.gov/vuln/detail/CVE-2023-1389",
  "product": "Archer AX21",
  "requiredAction": "Apply updates per vendor instructions.",
  "shortDescription": "TP-Link Archer AX-21 contains a command injection vulnerability that allows for remote code execution.",
  "vendorProject": "TP-Link",
  "vulnerabilityName": "TP-Link Archer AX-21 Command Injection Vulnerability"
}
—
Platform
platform
Exploit-DBhardware
receipt
Source
Exploit-DB
Its words
hardware
Read by
field:platform
Said since
2026-09-29 09:40 UTC
Last answered
2026-10-03 00:04 UTC
Original
open at the source
What the source handed over
{
  "aliases": "",
  "application_url": "",
  "author": "Voyag3r",
  "codes": "CVE-2023-1389",
  "date_added": "2023-08-10",
  "date_published": "2023-08-10",
  "date_updated": "2023-08-10",
  "description": "TP-Link Archer AX21 - Unauthenticated Command Injection",
  "file": "exploits/hardware/remote/51677.py",
  "id": "51677",
  "platform": "hardware",
  "port": "",
  "screenshot_url": "",
  "source_url": "",
  "tags": "",
  "type": "remote",
  "verified": "0"
}
—
Product
product
CISA Known Exploited VulnerabilitiesArcher AX21
receipt
Source
CISA Known Exploited Vulnerabilities
Its words
Archer AX21
Read by
field:product
Said since
2026-09-28 11:44 UTC
Last answered
2026-10-03 03:06 UTC
What the source handed over
{
  "cveID": "CVE-2023-1389",
  "cwes": "CWE-77",
  "dateAdded": "2023-05-01",
  "dueDate": "2023-05-22",
  "forensicTriage": "No",
  "knownRansomwareCampaignUse": "Unknown",
  "notes": "https://www.tp-link.com/us/support/download/archer-ax21/v3/#Firmware;  https://nvd.nist.gov/vuln/detail/CVE-2023-1389",
  "product": "Archer AX21",
  "requiredAction": "Apply updates per vendor instructions.",
  "shortDescription": "TP-Link Archer AX-21 contains a command injection vulnerability that allows for remote code execution.",
  "vendorProject": "TP-Link",
  "vulnerabilityName": "TP-Link Archer AX-21 Command Injection Vulnerability"
}
—
Type
type
Exploit-DBremote
receipt
Source
Exploit-DB
Its words
remote
Read by
field:type
Said since
2026-09-29 09:40 UTC
Last answered
2026-10-03 00:04 UTC
Original
open at the source
What the source handed over
{
  "aliases": "",
  "application_url": "",
  "author": "Voyag3r",
  "codes": "CVE-2023-1389",
  "date_added": "2023-08-10",
  "date_published": "2023-08-10",
  "date_updated": "2023-08-10",
  "description": "TP-Link Archer AX21 - Unauthenticated Command Injection",
  "file": "exploits/hardware/remote/51677.py",
  "id": "51677",
  "platform": "hardware",
  "port": "",
  "screenshot_url": "",
  "source_url": "",
  "tags": "",
  "type": "remote",
  "verified": "0"
}
—
Vendor project
vendor_project
CISA Known Exploited VulnerabilitiesTP-Link
receipt
Source
CISA Known Exploited Vulnerabilities
Its words
TP-Link
Read by
field:vendorProject
Said since
2026-09-28 11:44 UTC
Last answered
2026-10-03 03:06 UTC
What the source handed over
{
  "cveID": "CVE-2023-1389",
  "cwes": "CWE-77",
  "dateAdded": "2023-05-01",
  "dueDate": "2023-05-22",
  "forensicTriage": "No",
  "knownRansomwareCampaignUse": "Unknown",
  "notes": "https://www.tp-link.com/us/support/download/archer-ax21/v3/#Firmware;  https://nvd.nist.gov/vuln/detail/CVE-2023-1389",
  "product": "Archer AX21",
  "requiredAction": "Apply updates per vendor instructions.",
  "shortDescription": "TP-Link Archer AX-21 contains a command injection vulnerability that allows for remote code execution.",
  "vendorProject": "TP-Link",
  "vulnerabilityName": "TP-Link Archer AX-21 Command Injection Vulnerability"
}
—
Verified
verified
Exploit-DBfalse
receipt
Source
Exploit-DB
Its words
0
Read by
field:verified
Said since
2026-09-29 09:40 UTC
Last answered
2026-10-03 00:04 UTC
Original
open at the source
What the source handed over
{
  "aliases": "",
  "application_url": "",
  "author": "Voyag3r",
  "codes": "CVE-2023-1389",
  "date_added": "2023-08-10",
  "date_published": "2023-08-10",
  "date_updated": "2023-08-10",
  "description": "TP-Link Archer AX21 - Unauthenticated Command Injection",
  "file": "exploits/hardware/remote/51677.py",
  "id": "51677",
  "platform": "hardware",
  "port": "",
  "screenshot_url": "",
  "source_url": "",
  "tags": "",
  "type": "remote",
  "verified": "0"
}
—

vulnerability

TP-Link Archer AX-21 Command Injection Vulnerability
zetlyn/cve-kev · 2023-05-01
cwes CWE-77 due_date 2023-05-22 exploited yes forensic_triage false known_ransomware_campaign_use Unknown product Archer AX21 vendor_project TP-Link

exploit

TP-Link Archer AX21 - Unauthenticated Command Injection
zetlyn/cve-exploitdb · 2023-08-10
author Voyag3r platform hardware type remote verified false source