CVE-2023-38568

2023-09-0609:23:44

jpcert

www.cve.org

archer a10

firmware

vulnerability

remote code execution

AI Score

9.1

Confidence

High

EPSS

0.001

Percentile

38.3%

JSON

Archer A10 firmware versions prior to ‘Archer A10(JP)_V2_230504’ allows a network-adjacent unauthenticated attacker to execute arbitrary OS commands.

CNA Affected

[
  {
    "vendor": "TP-LINK",
    "product": "Archer A10",
    "versions": [
      {
        "version": "firmware versions prior to 'Archer A10(JP)_V2_230504'",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/vu/JVNVU99392903/

www.tp-link.com/jp/support/download/archer-a10/#Firmware