Lucene search

K
nvd[email protected]NVD:CVE-2023-38568
HistorySep 06, 2023 - 10:15 a.m.

CVE-2023-38568

2023-09-0610:15:14
CWE-78
web.nvd.nist.gov
1
network-adjacent attacker
unauthenticated execution
os commands

CVSS3

8.8

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.9

Confidence

High

EPSS

0.001

Percentile

38.3%

Archer A10 firmware versions prior to ‘Archer A10(JP)_V2_230504’ allows a network-adjacent unauthenticated attacker to execute arbitrary OS commands.

Affected configurations

Nvd
Node
tp-linkarcher_a10_firmwareRange<230504
AND
tp-linkarcher_a10Match2.0
VendorProductVersionCPE
tp-linkarcher_a10_firmware*cpe:2.3:o:tp-link:archer_a10_firmware:*:*:*:*:*:*:*:*
tp-linkarcher_a102.0cpe:2.3:h:tp-link:archer_a10:2.0:*:*:*:*:*:*:*

CVSS3

8.8

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.9

Confidence

High

EPSS

0.001

Percentile

38.3%

Related for NVD:CVE-2023-38568