Hardcoded credentials

Archer C50 firmware versions prior to 'Archer C50JPV3230505' and Archer C55 firmware versions prior to 'Archer C55JPV1230506' use hard-coded credentials to login to the affected device, which may allow a network-adjacent unauthenticated attacker to execute an arbitrary OS command...

Design/Logic Flaw

Archer A10 firmware versions prior to 'Archer A10JPV2230504' allows a network-adjacent unauthenticated attacker to execute arbitrary OS commands...

Authentication flaw

Improper authentication vulnerability in Archer C20 firmware versions prior to 'Archer C20JPV1230616' allows a network-adjacent unauthenticated attacker to execute an arbitrary OS command via a crafted request to bypass authentication...

Design/Logic Flaw

Archer AX6000 firmware versions prior to 'Archer AX6000JPV11.3.0 Build 20221208' allows a network-adjacent authenticated attacker to execute arbitrary OS commands...

CVE-2023-36489

TP-LINK TL-WR802N, TL-WR841N, and TL-WR902AC are affected by a network-adjacent, unauthenticated command-injection vulnerability. The issue affects TL-WR802N firmware before JP_V4_221008, TL-WR841N firmware before JP_V14_230506, and TL-WR902AC firmware before JP_V3_230506. Public disclosures cons...

CVE-2023-31188

CVE-2023-31188 affects TP-LINK Archer C50, Archer C55, and Archer C20 JP firmware. The root cause is a failure to neutralize special elements in the OS command path, allowing a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected firmwares include Archer C50(JP)_V3_2...

CVE-2023-32619

Archer C50 firmware versions prior to 'Archer C50JPV3230505' and Archer C55 firmware versions prior to 'Archer C55JPV1230506' use hard-coded credentials to login to the affected device, which may allow a network-adjacent unauthenticated attacker to execute an arbitrary OS command...

CVE-2023-32619

Archer C50 firmware versions prior to 'Archer C50JPV3230505' and Archer C55 firmware versions prior to 'Archer C55JPV1230506' use hard-coded credentials to login to the affected device, which may allow a network-adjacent unauthenticated attacker to execute an arbitrary OS command...

CVE-2023-37284

Improper authentication vulnerability in Archer C20 firmware versions prior to 'Archer C20JPV1230616' allows a network-adjacent unauthenticated attacker to execute an arbitrary OS command via a crafted request to bypass authentication...

CVE-2023-37284

CVE-2023-37284 affects TP-Link Archer C20 firmware prior to JP_V1_230616. The underlying issue is improper authentication, enabling a network-adjacent, unauthenticated attacker to execute arbitrary OS commands via a crafted request to bypass authentication. Affected product/versions: Archer C20 (...

CVE-2023-37284

Improper authentication vulnerability in Archer C20 firmware versions prior to 'Archer C20JPV1230616' allows a network-adjacent unauthenticated attacker to execute an arbitrary OS command via a crafted request to bypass authentication...

CVE-2023-38563

The CVE-2023-38563 entry concerns TP-LINK Archer C1200 and Archer C9 routers. Affected firmware versions prior to Archer C1200(JP)_V2_230508 and Archer C9(JP)_V3_230508 allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands. Practical impact is arbitrary commands execu...

CVE-2023-38588

Archer C3150 firmware versions prior to 'Archer C3150JPV2230511' allows a network-adjacent authenticated attacker to execute arbitrary OS commands...

CVE-2023-39224

Archer C5 firmware all versions and Archer C7 firmware versions prior to 'Archer C7JPV2230602' allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Note that Archer C5 is no longer supported, therefore the update for this product is not provided...

CVE-2023-39935

CVE-2023-39935 affects TP‑LINK Archer C5400 routers. Firmware versions prior to Archer C5400(JP)_V2_230506 are vulnerable to a network‑adjacent, authenticated attacker who can execute arbitrary OS commands due to an input/command handling flaw in the affected firmware. The issue enables remote co...

CVE-2023-39935

Archer C5400 firmware versions prior to 'Archer C5400JPV2230506' allows a network-adjacent authenticated attacker to execute arbitrary OS commands...

CVE-2023-40193

The CVE-2023-40193 entry concerns TP-LINK Deco M4 firmware. Affected: Deco M4 (JP) firmware prior to V2_1.5.8 Build 20230619. Impact: a network-adjacent authenticated attacker can execute arbitrary OS commands via the device, as described by the referenced sources. The vulnerability stems from im...

CVE-2023-40357

Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer AX50 firmware versions prior to 'Archer AX50JPV1230529', Archer A10 firmware versions prior to 'Archer A10JPV2230504', Archer AX10 firmware...

CVE-2023-40531

The CVE-2023-40531 issue affects TP-Link Archer AX6000 family firmware. A network-adjacent, authenticated attacker can execute arbitrary OS commands due to a vulnerability in versions prior to Archer AX6000(JP)_V1_1.3.0 Build 20221208. The exposure stems from how the router handles input in its a...

PT-2023-26513 · Tp Link · Archer C9 +1

Name of the Vulnerable Software and Affected Versions: Archer C1200 versions prior to Archer C1200JP V2 230508 Archer C9 versions prior to Archer C9JP V3 230508 Description: The issue allows a network-adjacent unauthenticated attacker to execute arbitrary OS commands. Recommendations: For Archer...