CVE-2023-36498 | TP-LINK ER7206 Omada Gigabit VPN Router 1.3.0 Build 20230322 Rel.70591 PPTP Client os command injection (TALOS-2023-1853)

A vulnerability, which was classified as critical, was found in TP-LINK ER7206 Omada Gigabit VPN Router 1.3.0 Build 20230322 Rel.70591. Affected is an unknown function of the component PPTP Client. The manipulation leads to os command injection.

This vulnerability is traded as CVE-2023-36498. It is possible to launch the attack remotely. There is no exploit available.