CVE-2023-32619

2023-09-0609:27:44

jpcert

www.cve.org

archer c50

archer c55

firmware

hard-coded credentials

vulnerability

os command

9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.4%

JSON

Archer C50 firmware versions prior to ‘Archer C50(JP)_V3_230505’ and Archer C55 firmware versions prior to ‘Archer C55(JP)_V1_230506’ use hard-coded credentials to login to the affected device, which may allow a network-adjacent unauthenticated attacker to execute an arbitrary OS command.

CNA Affected

[
  {
    "vendor": "TP-LINK",
    "product": "Archer C50",
    "versions": [
      {
        "version": "firmware versions prior to 'Archer C50(JP)_V3_230505'",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "TP-LINK",
    "product": "Archer C55",
    "versions": [
      {
        "version": "firmware versions prior to 'Archer C55(JP)_V1_230506'",
        "status": "affected"
      }
    ]
  }
]