CVE-2023-38563

2023-09-0609:24:08

jpcert

www.cve.org

cve-2023-38563

network-adjacent attacker

arbitrary os commands

9.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.4%

JSON

Archer C1200 firmware versions prior to ‘Archer C1200(JP)_V2_230508’ and Archer C9 firmware versions prior to ‘Archer C9(JP)_V3_230508’ allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands.

CNA Affected

[
  {
    "vendor": "TP-LINK",
    "product": "Archer C1200",
    "versions": [
      {
        "version": "firmware versions prior to 'Archer C1200(JP)_V2_230508'",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "TP-LINK",
    "product": "Archer C9",
    "versions": [
      {
        "version": "firmware versions prior to 'Archer C9(JP)_V3_230508'",
        "status": "affected"
      }
    ]
  }
]