{"id":"01M6MYECFGYY9X8A5665VCN740","slug":"tp-link-archer-ax21-ax1800","vendor":"TP-Link","oem":null,"model":"Archer AX21 (AX1800)","hw_revision":null,"category":"router","country_of_origin":"CN","description":"Wi-Fi 6 router with an unauthenticated command injection in the web UI (CVE-2023-1389), exploited by Mirai variants; in CISA's KEV catalog.","status":"confirmed","status_reason":"CVE-2023-1389 (CISA KEV); patched","status_at":1793853875304,"status_manual":1,"report_count":1,"verified_count":1,"created_by":"01M6MYDMJ4H4JTJ0TK8JWT1E1B","created_at":1793851863536,"updated_at":1793853875304,"url":"https://isitspying.com/p/tp-link-archer-ax21-ax1800","badge":"https://isitspying.com/badge/tp-link-archer-ax21-ax1800.svg","identifiers":[{"kind":"cve","value":"CVE-2023-1389","product_id":"01M6MYECFGYY9X8A5665VCN740","confidence":1,"source":"seed","created_at":1793851863655},{"kind":"model_number","value":"ARCHERAX21","product_id":"01M6MYECFGYY9X8A5665VCN740","confidence":1,"source":"seed","created_at":1793851863701},{"kind":"model_number","value":"AX1800","product_id":"01M6MYECFGYY9X8A5665VCN740","confidence":1,"source":"seed","created_at":1793851863750}],"findings":[{"kind":"known_cve","severity":"critical","n":1,"verified_n":1}],"contacted_hosts":[],"reports":[{"id":"01M6MYECV83ZBV8AWEQ69PSJSR","url":"https://isitspying.com/r/01M6MYECV83ZBV8AWEQ69PSJSR","status":"verified","verdict":"vulnerable","summary":"Unauthenticated command injection in the locale API (CVE-2023-1389), exploited by botnets; fixed in firmware 1.1.4","method":"app_analysis","channel":"api","handle":"isitspying","created_at":1793851863912}],"responses":[],"sources":[{"id":"01M6MYECRS0K8JJ9GXG6YD36A9","product_id":"01M6MYECFGYY9X8A5665VCN740","report_id":null,"title":"CVE-2023-1389","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1389","publisher":"NVD","published_at":"2023-03-15","created_at":1793851863833}]}