description: Deco M4 firmware versions prior to 'Deco M4(JP)_V2_1.5.8 Build 20230619' allows a network-adjacent authenticated attacker to execute arbitrary OS commands.
problem types: OS command injection
affected:
{
vendor: TP-LINK
product: Deco M4
versions:
version: firmware versions prior to 'Deco M4(JP)_V2_1.5.8 Build 20230619', status: affected
}