CVE-2020-10882

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the tdpServer service, which listens on...

TP-Link Archer A7/C7 Remote Code Execution (CVE-2020-10884; CVE-2020-10882; CVE-2020-10883)

A remote code execution vulnerability exists in TP-Link Archer A7/C7. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2020-10882

creationtimestamp| type| source ---|---|--- 2020-04-15 16:34:56+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/tplinkarchera7c7lanrce.rb 2020-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48331 2020-11-08 22:54:08+00:00|...

TP-Link Archer A7/C7 Unauthenticated LAN Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'openssl' class MetasploitModule 'TP-Link Archer A7/C7 Unauthenticated LAN Remote Code Execution', 'Description' = %q This module exploits a command injection...

CVE-2020-10882

CVE-2020-10882 affects TP-Link Archer A7 AC1750 with the tdpServer daemon (UDP 20002). The flaw arises when parsing the slave_mac parameter, where user input is not properly validated before being used in a system call, enabling unauthenticated remote code execution with root privileges. Public r...