Skip to content
OpenAdvisories
High · 8.0 CVE-2023-31188 EUVD-2023-35504GHSA-qc3c-m38x-gmmf

Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are …

Published Sep 6, 2023 · Updated Sep 27, 2024 · Assigned by jpcert

Vendor: TP-Link Systems Product: Archer C20 Product: Archer C50 Product: Archer C55 Category: Network devices

Description

Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer C50 firmware versions prior to 'Archer C50(JP)_V3_230505', Archer C55 firmware versions prior to 'Archer C55(JP)_V1_230506', and Archer C20 firmware versions prior to 'Archer C20(JP)_V1_230616'.

Affected products

VendorProductAffectedFixed
TP-LINK Archer C50 firmware versions prior to 'Archer C50(JP)_V3_230505' —
TP-LINK Archer C55 firmware versions prior to 'Archer C55(JP)_V1_230506' —
TP-LINK Archer C20 firmware versions prior to 'Archer C20(JP)_V1_230616' —

References