Authentication flaw

2023-09-0610:15:00

PRIOn knowledge base

www.prio-n.com

authentication

vulnerability

archer c20

firmware

network-adjacent

unauthenticated

attacker

os command

bypass

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.1%

JSON

Improper authentication vulnerability in Archer C20 firmware versions prior to ‘Archer C20(JP)_V1_230616’ allows a network-adjacent unauthenticated attacker to execute an arbitrary OS command via a crafted request to bypass authentication.

CPENameOperatorVersion
archer_c20_firmwarelt230616

CPE	Name	Operator	Version
	archer_c20_firmware	lt	230616

References

jvn.jp/en/vu/JVNVU99392903/

www.tp-link.com/jp/support/download/archer-c20/v1/