CVE-2023-39224

Archer C5 firmware all versions and Archer C7 firmware versions prior to 'Archer C7(JP)_V2_230602' allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Note that Archer C5 is no longer supported, therefore the update for this product is not provided.

Score

CVSS 3.1 8.0 High

Status

Modified - vultures@jpcert.or.jp

Published

2023-09-06

Last modified

2024-09-26

Weaknesses

CWE-78

Affected products

• Archer C5 (Tp-link)
• Archer C7 (Tp-link)
• Archer C7 Firmware (Tp-link)

References

• https://jvn.jp/en/vu/JVNVU99392903/
• https://www.tp-link.com/jp/support/download/archer-c7/v2/#Firmware