Description
Use of Hard-coded Credentials in TP-Link Archer C50 V3(
<=
180703)/V4(
<=
250117
)/V5(
<=
200407
), and C20 V5 (<US_V5_260419 or <EU_V5_260317) allows attackers to decrypt the config.xml files.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TP-Link Systems | Archer C50 V3 | ≤ 180703 | — |
| TP-Link Systems | Archer C50 V4 | ≤ 250117 | — |
| TP-Link Systems | Archer C50 V5 | ≤ 200407 | — |
| TP-Link Systems | Archer C20 V5 | < US_V5_260419, < EU_V5_260317 | US_V5_260419 |