HIGH🇵🇱 Wersja polska

CVE-2023-37284

CVSS 8.8v3.1pub. 2023-09-06upd. 2024-11-21

Improper authentication vulnerability in Archer C20 firmware versions prior to 'Archer C20(JP)_V1_230616' allows a network-adjacent unauthenticated attacker to execute an arbitrary OS command via a crafted request to bypass authentication.

CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Tp Link Archer C20

    HW
    Tp-Link
    1

  • Tp Link Archer C20 Firmware

    OS
    Tp-Link
    < 230616
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2026-0834HIGH7.2same product

Logic vulnerability in TP-Link Archer C20 v5, 6.0, Archer AX53 v1.0 and TL-WR841N v13 (TDDP module) allows una...

CVE-2023-30383HIGH7.5same product

TP-LINK Archer C50v2 Archer C50(US)_V2_160801, TP-LINK Archer C20v1 Archer_C20_V1_150707, and TP-LINK Archer C...

CVE-2025-15551MEDIUM5.9same product

Odpowiedź pochodząca z routerów TP-Link Archer MR200 v5.2, C20 v5 i v6, TL-WR850N v3 oraz TL-WR845N v4 dla każ...

CVE-2026-19586CRITICAL9.3same vendor

A pre-authentication OS command injection vulnerability has been identified in Omada gateways configured to op...

CVE-2025-6542CRITICAL9.3PL ✓same vendor

Zdalne wykonanie poleceń OS bez uwierzytelnienia w routerach TP-Link Omada