Lucene search

MitreCVE-2020-17891

HistoryMay 14, 2021 - 8:15 p.m.

CVE-2020-17891

2021-05-1420:15:11

CWE-79

mitre

web.nvd.nist.gov

tp-link

archer c1200

firmware

version 1.13

xss vulnerability

remote code execution

cve-2020-17891

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

46.7%

JSON

TP-Link Archer C1200 firmware version 1.13 Build 2018/01/24 rel.52299 EU has a XSS vulnerability allowing a remote attacker to execute arbitrary code.

Affected configurations

Nvd

Node

tp-linkarcher_c1200Match-

AND

tp-linkarcher_c1200_firmwareMatch1.1352299

VendorProductVersionCPE
tp-linkarcher_c1200-cpe:2.3:h:tp-link:archer_c1200:-:*:*:*:*:*:*:*
tp-linkarcher_c1200_firmware1.13cpe:2.3:o:tp-link:archer_c1200_firmware:1.13:52299:*:*:*:*:*:*

Vendor	Product	Version	CPE
tp-link	archer_c1200	-	cpe:2.3:h:tp-link:archer_c1200:-:::::::*
tp-link	archer_c1200_firmware	1.13	cpe:2.3:o:tp-link:archer_c1200_firmware:1.13:52299::::::

References

github.com/sandboxescape/TP-Link-wireless-router-Archer-C1200---Cross-Site-Scripting/

Social References

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

46.7%

JSON

Related for CVE-2020-17891