Vulnerabilities (CVE)

Filtered by vendor Tp-link Subscribe
Filtered by product M7200
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-29650 1 Tp-link 2 M7200, M7200 Firmware 2025-04-24 N/A 6.3 MEDIUM
SQL Injection vulnerability exists in the TP-Link M7200 4G LTE Mobile Wi-Fi Router Firmware Version: 1.0.7 Build 180127 Rel.55998n, allowing an unauthenticated attacker to inject malicious SQL statements via the username and password fields. NOTE: this is disputed because the issue can only be reproduced on a supplier-provided emulator, where access control is intentionally absent for ease of functional testing.