{"id":"01M6MYECV83ZBV8AWEQ69PSJSR","product_id":"01M6MYECFGYY9X8A5665VCN740","channel":"api","origin":"imported","status":"unverified","verdict":"vulnerable","summary":"Tenable reported CVE-2023-1389 in Archer AX21 firmware before 1.1.4 Build 20230219 and confirmed that version fixes the command-injection flaw.","body_md":null,"method":null,"source_method":null,"sources":[{"title":"Archer AX21 unauthenticated command injection","url":"https://www.tenable.com/security/research/tra-2023-11","publisher":"Tenable","publishedAt":"2023-03-14"},{"title":"Archer AX21 security statement","url":"https://www.tp-link.com/us/support/faq/3643/","publisher":"TP-Link","publishedAt":"2023-04-27"}],"playbook_version":null,"agent":"seed/curation","ai_model":null,"proof_of_possession":0,"reviewed_at":null,"review_note":"Source accuracy correction: Corrected unsupported Critical severity to source-rated High; removed generic AX1800 identifier and narrowed attack/remediation claims. This is not independent device verification.","created_at":1793851863912,"updated_at":1793917832000,"slug":"tp-link-archer-ax21-ax1800","vendor":"TP-Link","model":"Archer AX21 (AX1800)","category":"router","product_status":"reported","handle":"isitspying","display_name":"isitspying maintainers","user_role":"maintainer","url":"https://isitspying.com/r/01M6MYECV83ZBV8AWEQ69PSJSR","product_url":"https://isitspying.com/p/tp-link-archer-ax21-ax1800","findings":[{"id":"accuracy:01M6MYECV83ZBV8AWEQ69PSJSR:0","report_id":"01M6MYECV83ZBV8AWEQ69PSJSR","kind":"known_cve","severity":"high","detail":"CVE-2023-1389: unauthenticated command injection; Tenable CVSS 3 score 8.8. A WAN attack required an additional flaw.","ai_model":null}],"contacted_hosts":[],"evidence":[]}