HIGH🇬🇧 English

CVE-2023-39224

CVSS 8.0v3.1pub. 2023-09-06upd. 2024-11-21

Archer C5 firmware all versions and Archer C7 firmware versions prior to 'Archer C7(JP)_V2_230602' allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Note that Archer C5 is no longer supported, therefore the update for this product is not provided.

oryginał EN
CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Tp Link Archer C7

    HW
    Tp-Link
    2.0

  • Tp Link Archer C7 Firmware

    OS
    Tp-Link
    < 230602
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
Command Injection
CWE
Referencje

Powiązane podatności

CVE-2020-35575CRITICAL9.8PL ✓ten sam produkt

Ujawnienie hasła przez interfejs web w urządzeniach TP-Link

CVE-2025-9377HIGH8.6⚠ KEVten sam produkt

The authenticated remote command execution (RCE) vulnerability exists in the Parental Control page on TP-Link...

CVE-2015-3035HIGH7.5⚠ KEVten sam produkt

Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmwa...

CVE-2026-5363MEDIUM5.4ten sam produkt

Podatność Inadequate Encryption Strength w TP-Link Archer C7 v5 i v5.8 (moduły uhttpd) umożliwia wyzyskanie od...

CVE-2023-2646MEDIUM4.5ten sam produkt

A vulnerability has been found in TP-Link Archer C7v2 v2_en_us_180114 and classified as problematic. Affected ...