Design/Logic Flaw

2020-11-2106:15:00

PRIOn knowledge base

www.prio-n.com

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.3%

JSON

UNIX Symbolic Link (Symlink) Following in TP-Link Archer C9(US)_V1_180125 firmware allows an unauthenticated actor, with physical access and network access, to read sensitive files and write to a limited set of files after plugging a crafted USB drive into the router.

CPENameOperatorVersion
archer_c9_firmwareeq180125

CPE	Name	Operator	Version
	archer_c9_firmware	eq	180125

References

www.tenable.com/security/research/tra-2020-60