What was the company, and what did they inject?
TP-Link
https://nvd.nist.gov/vuln/detail/CVE-2023-1389
That's only proof of the vulnerability. Where's the proof of it being misused by the vendor?