Design/Logic Flaw

2023-09-0610:15:00

PRIOn knowledge base

www.prio-n.com

archer c5

archer c7

firmware vulnerability

os command execution

network-adjacent attacker

authenticated

8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.8%

JSON

Archer C5 firmware all versions and Archer C7 firmware versions prior to ‘Archer C7(JP)_V2_230602’ allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Note that Archer C5 is no longer supported, therefore the update for this product is not provided.

CPENameOperatorVersion
archer_c7_firmwarelt230602

CPE	Name	Operator	Version
	archer_c7_firmware	lt	230602

References

jvn.jp/en/vu/JVNVU99392903/

www.tp-link.com/jp/support/download/archer-c7/v2/