High · 8.0 CVE-2023-38588 EUVD-2023-42387GHSA-52x5-j3x8-48hp

Archer C3150 firmware versions prior to 'Archer C3150(JP)_V2_230511' allows a network-adjacent authenticated attacker to execute arbitrary …

Published Sep 6, 2023 · Updated Sep 26, 2024 · Assigned by jpcert

Vendor: TP-Link Systems Product: Archer C3150 Category: Network devices

Description

Archer C3150 firmware versions prior to 'Archer C3150(JP)_V2_230511' allows a network-adjacent authenticated attacker to execute arbitrary OS commands.

Affected products

Vendor	Product	Affected	Fixed
TP-LINK	Archer C3150	firmware versions prior to 'Archer C3150(JP)_V2_230511'	—

References

https://www.tp-link.com/jp/support/download/archer-c3150/#Firmware
https://jvn.jp/en/vu/JVNVU99392903/