CVE-2020-28347

🗓️ 08 Nov 2020 20:00:39Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 65 Views

tpServer on TP-Link Archer A7 AC1750 devices allows remote code execution via slave_mac paramete

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2020-28347	15 Apr 202016:34	–	circl
CNVD	TP-Link Archer A7 AC1750 Command Injection Vulnerability	16 Nov 202000:00	–	cnvd
Cvelist	CVE-2020-28347	8 Nov 202020:00	–	cvelist
Metasploit	TP-Link Archer A7/C7 Unauthenticated LAN Remote Code Execution	7 Apr 202017:57	–	metasploit
NVD	CVE-2020-28347	8 Nov 202020:15	–	nvd
OSV	CVE-2020-28347	8 Nov 202020:15	–	osv
Prion	Code injection	8 Nov 202020:15	–	prion

NVD

Node

tp-link ac1750_firmwareRange<201029

AND

tp-link ac1750Matcha7

Source	Link
github	www.github.com/rdomanski/Exploits_and_Advisories/blob/master/advisories/Pwn2Own/Tokyo2019/lao_bomb.md
github	www.github.com/pedrib/PoC/blob/master/advisories/Pwn2Own/Tokyo_2019/lao_bomb/lao_bomb.md
github	www.github.com/rapid7/metasploit-framework/pull/14365
github	www.github.com/rdomanski/Exploits_and_Advisories/blob/master/advisories/Pwn2Own/Tokyo2020/minesweeper.md
github	www.github.com/pedrib/PoC/blob/master/advisories/Pwn2Own/Tokyo_2020/minesweeper.md

17 Jun 2026 03:10Current

9.1High risk

Vulners AI Score9.1

CVSS 3.19.8

CVSS 210

EPSS0.73848

cve-2020-28347 tdpserver tp-link archer a7 ac1750 remote code execution slave_mac parameter