CVE-2023-32619

Archer C50 firmware versions prior to 'Archer C50(JP)_V3_230505' and Archer C55 firmware versions prior to 'Archer C55(JP)_V1_230506' use hard-coded credentials to login to the affected device, which may allow a network-adjacent unauthenticated attacker to execute an arbitrary OS command.

Score

CVSS 3.1 8.8 High

Status

Modified - vultures@jpcert.or.jp

Published

2023-09-06

Last modified

2024-09-26

Weaknesses

CWE-798

Affected products

• Archer C50 (Tp-link)
• Archer C50 V3 Firmware (Tp-link)
• Archer C55 (Tp-link)
• Archer C55 Firmware (Tp-link)

References

• https://jvn.jp/en/vu/JVNVU99392903/
• https://www.tp-link.com/jp/support/download/archer-c50/v3/#Firmware
• https://www.tp-link.com/jp/support/download/archer-c55/#Firmware