Unscored CVE-2023-39935 EUVD-2023-43633GHSA-hr43-w7vj-7297

Archer C5400 firmware versions prior to 'Archer C5400(JP)_V2_230506' allows a network-adjacent authenticated attacker to execute arbitrary …

Published Sep 6, 2023 · Updated Sep 26, 2024 · Assigned by jpcert

Vendor: TP-Link Systems Product: Archer C5400 Category: Network devices

Description

Archer C5400 firmware versions prior to 'Archer C5400(JP)_V2_230506' allows a network-adjacent authenticated attacker to execute arbitrary OS commands.

Affected products

Vendor	Product	Affected	Fixed
TP-LINK	Archer C5400	firmware versions prior to 'Archer C5400(JP)_V2_230506'	—

References

https://www.tp-link.com/jp/support/download/archer-c5400/#Firmware
https://jvn.jp/en/vu/JVNVU99392903/