CVE-2020-5795

UNIX Symbolic Link (Symlink) Following in TP-Link Archer A7(US)_V5_200721 allows an authenticated admin user, with physical access and network access, to execute arbitrary code after plugging a crafted USB drive into the router.

Score
CVSS 3.1 6.2 Medium
Status
Modified - vulnreport@tenable.com
Published
2020-11-06
Last modified
2024-08-04
Weaknesses
CWE-59, CWE-61

Affected products

References