Skip to content
OpenAdvisories
High · 8.8 CVE-2023-32619 EUVD-2023-36862GHSA-348j-ghgq-g3hj

Archer C50 firmware versions prior to 'Archer C50(JP)_V3_230505' and Archer C55 firmware versions prior to 'Archer C55(JP)_V1_230506' use h…

Published Sep 6, 2023 · Updated Sep 26, 2024 · Assigned by jpcert

Vendor: TP-Link Systems Product: Archer C50 Product: Archer C55 Category: Network devices

Description

Archer C50 firmware versions prior to 'Archer C50(JP)_V3_230505' and Archer C55 firmware versions prior to 'Archer C55(JP)_V1_230506' use hard-coded credentials to login to the affected device, which may allow a network-adjacent unauthenticated attacker to execute an arbitrary OS command.

Affected products

VendorProductAffectedFixed
TP-LINK Archer C50 firmware versions prior to 'Archer C50(JP)_V3_230505' —
TP-LINK Archer C55 firmware versions prior to 'Archer C55(JP)_V1_230506' —

References