CVE-2019-12104

CVE-2019-12104 describes multiple post-authentication command injection vulnerabilities in the web-based configuration interface of the TP-Link M7350 V3 mobile Wi-Fi router, specifically in firmware versions prior to 190531. This vulnerability carries a high CVSS score of 8.8, indicating a critical risk where an authenticated attacker can achieve complete compromise (confidentiality, integrity, and availability) of the device over the network with low attack complexity. While there is no evidence of active exploitation in the wild or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion and media coverage, suggesting awareness within security circles.