Lucene search

K
zdiPedro Ribeiro and Radek Domanski of Team FlashbackZDI-20-335
HistoryMar 25, 2020 - 12:00 a.m.

(Pwn2Own) TP-Link Archer A7 File System Incorrect Permission Assignment for Critical Resource Privilege Escalation Vulnerability

2020-03-2500:00:00
Pedro Ribeiro and Radek Domanski of Team Flashback
www.zerodayinitiative.com
8

0.0005 Low

EPSS

Percentile

17.4%

This vulnerability allows local attackers to escalate privileges on affected installations of TP-Link Archer A7 AC1750 routers. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the file system. The issue lies in the lack of proper permissions set on the file system. An attacker can leverage this vulnerability to escalate privileges.

0.0005 Low

EPSS

Percentile

17.4%