TP-Link EAP120 Router SQL Injection Vulnerability in Login Dashboard

A SQL injection vulnerability has been identified in the TP-Link EAP120 router's login dashboard, version 1.0. This vulnerability allows an unauthenticated attacker to inject malicious SQL statements through the login fields. However, it is important to note that this issue can only be reproduced on a supplier-provided emulator, where access control is intentionally disabled for functional testing.

Impact

Exploitation of this vulnerability allows for SQL injection, where an attacker can manipulate SQL queries to the database. This could potentially lead to unauthorized data access, data manipulation, or in some cases, executing administrative operations on the database.