CVE-2019-13267

The CVE-2019-13267 entry concerns TP-Link Archer C3200 V1 and Archer C2 V1 routers with insufficient isolation between host and guest networks on the same device. The root cause is a mechanism where, during IGMP group joins/leaves, the router creates an IGMP Membership Query using the Group IP, s...

CVE-2019-13268

The CVE-2019-13268 entry applies to TP-Link Archer C3200 V1 and Archer C2 V1 devices, which expose insufficient compartmentalization between host and guest networks. ARP requests are forwarded across the two networks, enabling a potential covert channel: the sender can craft ARP requests to conve...

CVE-2019-13266

CVE-2019-13266 describes an insufficient compartmentalization vulnerability on TP-Link Archer C3200 V1 and Archer C2 V1 routers. The issue arises when a DHCP request’s 32-bit Transaction ID is reused across Host and Guest networks, causing the router to respond with a NAK to both networks and ena...

CVE-2023-30383

The CVE-2023-30383 entry affects TP-Link Archer C50v2 (C50(US)_V2_160801), Archer C20v1 (Archer_C20_V1_150707), and Archer C2v1 (Archer_C2_US__V1_170228). Root cause: a buffer overflow in the router firmware when handling request parameters, which can be triggered remotely. Impact: potential Deni...