Search

Find a vulnerability

Search criteria

    10 vulnerabilities found for archer_c20_firmware by tp-link

    CVE-2025-15551 (GCVE-0-2025-15551)

    Vulnerability from nvd – Published: 2026-02-05 17:22 – Updated: 2026-04-22 21:35
    VLAI
    Title
    LAN Code Execution on TP-Link Archer MR200, Archer C20, TL-WR850N and TL-WR845N
    Summary
    The response coming from TP-Link Archer MR200 v5.2, C20 v5 and v6, TL-WR850N v3, and TL-WR845N v4 for any request is getting executed by the JavaScript function like eval directly without any check. Attackers can exploit this vulnerability via a Man-in-the-Middle (MitM) attack to execute JavaScript code on the router's admin web portal without the user's permission or knowledge.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-95 - Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')
    Assigner
    Impacted products
    Vendor Product Version
    TP-Link Systems Inc. Archer MR200 v5.2 Affected: 0 , < 1.2.0 Build 250917 Rel.51746 (custom)
    Create a notification for this product.
    TP-Link Systems Inc. Archer C20 v6 Affected: 0 , < 0.9.1 4.19 v0001.0 Build 250630 Rel.56583n (custom)
    Create a notification for this product.
    TP Link Systems Inc. TL-WR850N v3 Affected: 0 , < 3.16.0 0.9.1 v6031.0 Build 251205 Rel.22089n (custom)
    Create a notification for this product.
    TP Link Systems Inc. TL-WR845N v4 Affected: 0 , < 0.9.1 3.19 Build 251031 rel33710 (custom)
    Create a notification for this product.
    TP-Link Systems Inc. Archer C20 v5 Affected: 0 , < US_V5_260419 (custom)
    Affected: 0 , < EU_V5_260317 (custom)
    Create a notification for this product.
    Credits
    Swaroop Dora, Deven Lunkad, Ashutosh Kumar, and S. Venkatesan from IoT Security Research Lab, Indian Institute of Information Technology, Allahabad
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2025-15551",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-02-05T20:29:20.573672Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-02-05T20:31:56.005Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Archer MR200 v5.2",
              "vendor": "TP-Link Systems Inc.",
              "versions": [
                {
                  "lessThan": "1.2.0 Build 250917 Rel.51746",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "Archer C20 v6",
              "vendor": "TP-Link Systems Inc.",
              "versions": [
                {
                  "lessThan": "0.9.1 4.19 v0001.0 Build 250630 Rel.56583n",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "TL-WR850N v3",
              "vendor": "TP Link Systems Inc.",
              "versions": [
                {
                  "lessThan": "3.16.0 0.9.1 v6031.0 Build 251205 Rel.22089n",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "TL-WR845N v4",
              "vendor": "TP Link Systems Inc.",
              "versions": [
                {
                  "lessThan": "0.9.1 3.19 Build 251031 rel33710",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "Archer C20 v5",
              "vendor": "TP-Link Systems Inc.",
              "versions": [
                {
                  "lessThan": "US_V5_260419",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                },
                {
                  "lessThan": "EU_V5_260317",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "finder",
              "value": "Swaroop Dora, Deven Lunkad, Ashutosh Kumar, and S. Venkatesan from IoT Security Research Lab, Indian Institute of Information Technology, Allahabad"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "The response coming from TP-Link Archer MR200 v5.2, C20 v5 and v6, TL-WR850N v3, and TL-WR845N v4 for any request is getting executed by the JavaScript function like eval directly without any check.\u0026nbsp;Attackers can exploit this vulnerability via a Man-in-the-Middle (MitM) attack to execute JavaScript code on the router\u0027s admin web portal without the user\u0027s permission or knowledge."
                }
              ],
              "value": "The response coming from TP-Link Archer MR200 v5.2, C20 v5 and v6, TL-WR850N v3, and TL-WR845N v4 for any request is getting executed by the JavaScript function like eval directly without any check.\u00a0Attackers can exploit this vulnerability via a Man-in-the-Middle (MitM) attack to execute JavaScript code on the router\u0027s admin web portal without the user\u0027s permission or knowledge."
            }
          ],
          "impacts": [
            {
              "capecId": "CAPEC-153",
              "descriptions": [
                {
                  "lang": "en",
                  "value": "CAPEC-153 Input Data Manipulation"
                }
              ]
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "PRESENT",
                "attackVector": "ADJACENT",
                "baseScore": 5.9,
                "baseSeverity": "MEDIUM",
                "exploitMaturity": "NOT_DEFINED",
                "privilegesRequired": "NONE",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "PASSIVE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "LOW",
                "vulnConfidentialityImpact": "HIGH",
                "vulnIntegrityImpact": "LOW",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-95",
                  "description": "CWE-95 Improper Neutralization of Directives in Dynamically Evaluated Code (\u0027Eval Injection\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-04-22T21:35:19.737Z",
            "orgId": "f23511db-6c3e-4e32-a477-6aa17d310630",
            "shortName": "TPLink"
          },
          "references": [
            {
              "tags": [
                "patch"
              ],
              "url": "https://www.tp-link.com/en/support/download/archer-mr200/v5.20/#Firmware"
            },
            {
              "tags": [
                "patch"
              ],
              "url": "https://www.tp-link.com/en/support/download/archer-c20/v6/#Firmware"
            },
            {
              "tags": [
                "patch"
              ],
              "url": "https://www.tp-link.com/in/support/download/tl-wr850n/#Firmware"
            },
            {
              "tags": [
                "patch"
              ],
              "url": "https://www.tp-link.com/en/support/download/tl-wr845n/#Firmware"
            },
            {
              "tags": [
                "patch"
              ],
              "url": "https://www.tp-link.com/in/support/download/archer-mr200/v5.20/#Firmware"
            },
            {
              "tags": [
                "patch"
              ],
              "url": "https://www.tp-link.com/in/support/download/archer-c20/v6/#Firmware"
            },
            {
              "tags": [
                "patch"
              ],
              "url": "https://www.tp-link.com/in/support/download/tl-wr845n/#Firmware"
            },
            {
              "tags": [
                "vendor-advisory"
              ],
              "url": "https://www.tp-link.com/us/support/faq/4948/"
            },
            {
              "tags": [
                "patch"
              ],
              "url": "https://www.tp-link.com/us/support/download/archer-c20/v5/#Firmware"
            },
            {
              "tags": [
                "patch"
              ],
              "url": "https://www.tp-link.com/en/support/download/archer-c20/v5/#Firmware"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "title": "LAN Code Execution on TP-Link Archer MR200, Archer C20, TL-WR850N and TL-WR845N",
          "x_generator": {
            "engine": "Vulnogram 0.5.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "f23511db-6c3e-4e32-a477-6aa17d310630",
        "assignerShortName": "TPLink",
        "cveId": "CVE-2025-15551",
        "datePublished": "2026-02-05T17:22:55.600Z",
        "dateReserved": "2026-01-29T23:07:58.401Z",
        "dateUpdated": "2026-04-22T21:35:19.737Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-0834 (GCVE-0-2026-0834)

    Vulnerability from nvd – Published: 2026-01-21 17:14 – Updated: 2026-04-28 17:46
    VLAI
    Title
    Logic Vulnerability on TP-Link Archer C20, Archer AX53 and TL-WR841N v13
    Summary
    Logic vulnerability in TP-Link Archer C20 v5, 6.0, Archer AX53 v1.0 and TL-WR841N v13 (TDDP module) allows unauthenticated adjacent attackers to execute administrative commands including factory reset and device reboot without credentials. Attackers on the adjacent network can remotely trigger factory resets and reboots without credentials, causing configuration loss and interruption of device availability. This issue affects Archer C20 v6.0 < V6_251031, Archer C20 v5 <EU_V5_260317 or < US_V5_260419 Archer AX53 v1.0 < V1_251215 TL-WR841N v13 < 0.9.1 Build 20231120 Rel.62366
    SSVC
    Exploitation: poc Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-290 - Authentication Bypass by Spoofing
    Assigner
    Impacted products
    Vendor Product Version
    TP-Link Systems Inc. Archer C20 v6.0, Archer AX53 v1.0 Affected: 0 , < V6_251031 (custom)
    Affected: 0 , < V1_251215 (custom)
    Create a notification for this product.
    TP-Link Systems Inc. Archer C20 V5 Affected: 0 , < US_V5_260419 (custom)
    Affected: 0 , < EU_V5_260317 (custom)
    Create a notification for this product.
    TP Link Systems Inc. TL-WR841N v13 Affected: 0 , < 0.9.1 Build 20231120 Rel.62366 (custom)
    Create a notification for this product.
    Credits
    Matt Graham (mattg.systems) Ben Grinberg, Adiel Sol, Daniel Lubel, Erez Cohen, Nir Somech, Arad Inbar, Dream Group
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-0834",
                    "options": [
                      {
                        "Exploitation": "poc"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-01-22T04:55:49.767529Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-02-26T14:44:34.299Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "modules": [
                "tddp"
              ],
              "product": "Archer C20 v6.0, Archer AX53 v1.0",
              "vendor": "TP-Link Systems Inc.",
              "versions": [
                {
                  "lessThan": "V6_251031",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                },
                {
                  "lessThan": "V1_251215",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "modules": [
                "tddp"
              ],
              "product": "Archer C20 V5",
              "vendor": "TP-Link Systems Inc.",
              "versions": [
                {
                  "lessThan": "US_V5_260419",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                },
                {
                  "lessThan": "EU_V5_260317",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "TL-WR841N v13",
              "vendor": "TP Link Systems Inc.",
              "versions": [
                {
                  "lessThan": "0.9.1 Build 20231120 Rel.62366",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "finder",
              "value": "Matt Graham (mattg.systems)"
            },
            {
              "lang": "en",
              "type": "finder",
              "value": "Ben Grinberg, Adiel Sol, Daniel Lubel, Erez Cohen, Nir Somech, Arad Inbar, Dream Group"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "Logic vulnerability \u003cspan\u003ein TP-Link Archer C20 v5, 6.0, Archer AX53 v1.0 and TL-WR841N v13 (\u003c/span\u003eTDDP module) allows unauthenticated adjacent attackers to execute administrative commands including factory reset and device reboot without credentials.\u0026nbsp;Attackers on the adjacent network can remotely trigger factory resets and reboots without credentials, causing configuration loss and interruption of device availability.\u003cp\u003eThis issue affects Archer C20 v6.0 \u0026lt; V6_251031, Archer C20 v5 \u0026lt;EU_V5_260317 or \u0026lt;\u0026nbsp;US_V5_260419\u003cbr\u003e\n\nArcher AX53 v1.0 \u0026lt; \n\nV1_251215\u003c/p\u003e\u003cp\u003e\u003cspan\u003eTL-WR841N v13 \u0026lt;\u0026nbsp;\u003c/span\u003e\u003cspan\u003e0.9.1 Build 20231120 Rel.62366\u003c/span\u003e\u003c/p\u003e"
                }
              ],
              "value": "Logic vulnerability in TP-Link Archer C20 v5, 6.0, Archer AX53 v1.0 and TL-WR841N v13 (TDDP module) allows unauthenticated adjacent attackers to execute administrative commands including factory reset and device reboot without credentials.\u00a0Attackers on the adjacent network can remotely trigger factory resets and reboots without credentials, causing configuration loss and interruption of device availability.\n\nThis issue affects Archer C20 v6.0 \u003c V6_251031, Archer C20 v5 \u003cEU_V5_260317 or \u003c\u00a0US_V5_260419\n\n\nArcher AX53 v1.0 \u003c \n\nV1_251215\n\n\n\nTL-WR841N v13 \u003c\u00a00.9.1 Build 20231120 Rel.62366"
            }
          ],
          "impacts": [
            {
              "capecId": "CAPEC-88",
              "descriptions": [
                {
                  "lang": "en",
                  "value": "CAPEC-88 OS Command Injection"
                }
              ]
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "ADJACENT",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "exploitMaturity": "NOT_DEFINED",
                "privilegesRequired": "NONE",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "HIGH",
                "vulnConfidentialityImpact": "LOW",
                "vulnIntegrityImpact": "HIGH",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-290",
                  "description": "CWE-290 Authentication Bypass by Spoofing",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-04-28T17:46:59.608Z",
            "orgId": "f23511db-6c3e-4e32-a477-6aa17d310630",
            "shortName": "TPLink"
          },
          "references": [
            {
              "tags": [
                "patch"
              ],
              "url": "https://www.tp-link.com/en/support/download/archer-c20/v6/#Firmware"
            },
            {
              "tags": [
                "patch"
              ],
              "url": "https://www.tp-link.com/en/support/download/archer-ax53/v1/#Firmware"
            },
            {
              "url": "https://mattg.systems/posts/cve-2026-0834/"
            },
            {
              "tags": [
                "vendor-advisory"
              ],
              "url": "https://www.tp-link.com/us/support/faq/4905/"
            },
            {
              "tags": [
                "patch"
              ],
              "url": "https://www.tp-link.com/us/support/download/archer-c20/v5/#Firmware"
            },
            {
              "tags": [
                "patch"
              ],
              "url": "https://www.tp-link.com/en/support/download/archer-c20/v5/#Firmware"
            },
            {
              "tags": [
                "patch"
              ],
              "url": "https://www.tp-link.com/us/support/download/tl-wr841n/v13/#Firmware"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "title": "Logic Vulnerability on TP-Link Archer C20, Archer AX53 and TL-WR841N v13",
          "x_generator": {
            "engine": "Vulnogram 0.5.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "f23511db-6c3e-4e32-a477-6aa17d310630",
        "assignerShortName": "TPLink",
        "cveId": "CVE-2026-0834",
        "datePublished": "2026-01-21T17:14:55.179Z",
        "dateReserved": "2026-01-09T21:48:53.385Z",
        "dateUpdated": "2026-04-28T17:46:59.608Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2024-57049 (GCVE-0-2024-57049)

    Vulnerability from nvd – Published: 2025-02-18 00:00 – Updated: 2026-06-30 19:03

    DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

    Show details on NVD website

    {
      "containers": {
        "cna": {
          "providerMetadata": {
            "dateUpdated": "2026-06-30T19:03:14.367Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "rejectedReasons": [
            {
              "lang": "en",
              "value": "DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none."
            }
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2024-57049",
        "datePublished": "2025-02-18T00:00:00.000Z",
        "dateRejected": "2026-06-30T00:00:00.000Z",
        "dateReserved": "2025-01-09T00:00:00.000Z",
        "dateUpdated": "2026-06-30T19:03:14.367Z",
        "state": "REJECTED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2023-37284 (GCVE-0-2023-37284)

    Vulnerability from nvd – Published: 2023-09-06 09:24 – Updated: 2024-09-26 20:41
    VLAI
    Summary
    Improper authentication vulnerability in Archer C20 firmware versions prior to 'Archer C20(JP)_V1_230616' allows a network-adjacent unauthenticated attacker to execute an arbitrary OS command via a crafted request to bypass authentication.
    Severity
    No CVSS data available.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • Improper authentication
    Assigner
    Impacted products
    Vendor Product Version
    TP-LINK Archer C20 Affected: firmware versions prior to 'Archer C20(JP)_V1_230616'
    Create a notification for this product.
    tp-link archer_c20_firmware Affected: v1_230616
        cpe:2.3:o:tp-link:archer_c20_firmware:230616:*:*:*:*:*:*:*
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T17:09:34.039Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.tp-link.com/jp/support/download/archer-c20/v1/#Firmware"
              },
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://jvn.jp/en/vu/JVNVU99392903/"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "affected": [
              {
                "cpes": [
                  "cpe:2.3:o:tp-link:archer_c20_firmware:230616:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "archer_c20_firmware",
                "vendor": "tp-link",
                "versions": [
                  {
                    "status": "affected",
                    "version": "v1_230616"
                  }
                ]
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2023-37284",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-09-26T20:41:03.439517Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-09-26T20:41:42.264Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "Archer C20",
              "vendor": "TP-LINK",
              "versions": [
                {
                  "status": "affected",
                  "version": "firmware versions prior to \u0027Archer C20(JP)_V1_230616\u0027"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Improper authentication vulnerability in Archer C20 firmware versions prior to \u0027Archer C20(JP)_V1_230616\u0027 allows a network-adjacent unauthenticated attacker to execute an arbitrary OS command via a crafted request to bypass authentication."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "Improper authentication",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-09-06T09:24:42.525Z",
            "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
            "shortName": "jpcert"
          },
          "references": [
            {
              "url": "https://www.tp-link.com/jp/support/download/archer-c20/v1/#Firmware"
            },
            {
              "url": "https://jvn.jp/en/vu/JVNVU99392903/"
            }
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "assignerShortName": "jpcert",
        "cveId": "CVE-2023-37284",
        "datePublished": "2023-09-06T09:24:42.525Z",
        "dateReserved": "2023-08-15T07:33:40.187Z",
        "dateUpdated": "2024-09-26T20:41:42.264Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2023-30383 (GCVE-0-2023-30383)

    Vulnerability from nvd – Published: 2023-07-18 00:00 – Updated: 2024-10-28 18:35
    VLAI
    Summary
    TP-LINK Archer C50v2 Archer C50(US)_V2_160801, TP-LINK Archer C20v1 Archer_C20_V1_150707, and TP-LINK Archer C2v1 Archer_C2_US__V1_170228 were discovered to contain a buffer overflow which may lead to a Denial of Service (DoS) when parsing crafted data.
    Severity
    No CVSS data available.
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • n/a
    Assigner
    Impacted products
    Vendor Product Version
    tp-link archer_c50 Affected: v2_160801
        cpe:2.3:h:tp-link:archer_c50:-:*:*:*:*:*:*:*
    Create a notification for this product.
    tp-link archer_c20 Affected: v1_150707
        cpe:2.3:h:tp-link:archer_c20:1:*:*:*:*:*:*:*
    Create a notification for this product.
    tp-link archer_c2 Affected: v1_170228
        cpe:2.3:h:tp-link:archer_c2:-:*:*:*:*:*:*:*
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T14:21:44.817Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "http://tplink.com"
              },
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.tp-link.com/us/support/download/archer-c50/v2/#Firmware%29%2CTPLINK"
              },
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.tp-link.com/us/support/download/archer-c2/v1/#Firmware"
              },
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.tp-link.com/us/support/download/archer-c50/v2/#Firmware"
              },
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://gist.github.com/a2ure123/a4eda2813d85d8b414bb87e855ab4bf8"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "affected": [
              {
                "cpes": [
                  "cpe:2.3:h:tp-link:archer_c50:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "archer_c50",
                "vendor": "tp-link",
                "versions": [
                  {
                    "status": "affected",
                    "version": "v2_160801"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:tp-link:archer_c20:1:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "archer_c20",
                "vendor": "tp-link",
                "versions": [
                  {
                    "status": "affected",
                    "version": "v1_150707"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:tp-link:archer_c2:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "archer_c2",
                "vendor": "tp-link",
                "versions": [
                  {
                    "status": "affected",
                    "version": "v1_170228"
                  }
                ]
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2023-30383",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-10-28T18:32:54.899161Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-10-28T18:35:54.750Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "TP-LINK Archer C50v2 Archer C50(US)_V2_160801, TP-LINK Archer C20v1 Archer_C20_V1_150707, and TP-LINK Archer C2v1 Archer_C2_US__V1_170228 were discovered to contain a buffer overflow which may lead to a Denial of Service (DoS) when parsing crafted data."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-07-18T00:00:00.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "url": "http://tplink.com"
            },
            {
              "url": "https://www.tp-link.com/us/support/download/archer-c50/v2/#Firmware%29%2CTPLINK"
            },
            {
              "url": "https://www.tp-link.com/us/support/download/archer-c2/v1/#Firmware"
            },
            {
              "url": "https://www.tp-link.com/us/support/download/archer-c50/v2/#Firmware"
            },
            {
              "url": "https://gist.github.com/a2ure123/a4eda2813d85d8b414bb87e855ab4bf8"
            }
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2023-30383",
        "datePublished": "2023-07-18T00:00:00.000Z",
        "dateReserved": "2023-04-07T00:00:00.000Z",
        "dateUpdated": "2024-10-28T18:35:54.750Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2025-15551 (GCVE-0-2025-15551)

    Vulnerability from cvelistv5 – Published: 2026-02-05 17:22 – Updated: 2026-04-22 21:35
    VLAI
    Title
    LAN Code Execution on TP-Link Archer MR200, Archer C20, TL-WR850N and TL-WR845N
    Summary
    The response coming from TP-Link Archer MR200 v5.2, C20 v5 and v6, TL-WR850N v3, and TL-WR845N v4 for any request is getting executed by the JavaScript function like eval directly without any check. Attackers can exploit this vulnerability via a Man-in-the-Middle (MitM) attack to execute JavaScript code on the router's admin web portal without the user's permission or knowledge.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-95 - Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')
    Assigner
    Impacted products
    Vendor Product Version
    TP-Link Systems Inc. Archer MR200 v5.2 Affected: 0 , < 1.2.0 Build 250917 Rel.51746 (custom)
    Create a notification for this product.
    TP-Link Systems Inc. Archer C20 v6 Affected: 0 , < 0.9.1 4.19 v0001.0 Build 250630 Rel.56583n (custom)
    Create a notification for this product.
    TP Link Systems Inc. TL-WR850N v3 Affected: 0 , < 3.16.0 0.9.1 v6031.0 Build 251205 Rel.22089n (custom)
    Create a notification for this product.
    TP Link Systems Inc. TL-WR845N v4 Affected: 0 , < 0.9.1 3.19 Build 251031 rel33710 (custom)
    Create a notification for this product.
    TP-Link Systems Inc. Archer C20 v5 Affected: 0 , < US_V5_260419 (custom)
    Affected: 0 , < EU_V5_260317 (custom)
    Create a notification for this product.
    Credits
    Swaroop Dora, Deven Lunkad, Ashutosh Kumar, and S. Venkatesan from IoT Security Research Lab, Indian Institute of Information Technology, Allahabad
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2025-15551",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-02-05T20:29:20.573672Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-02-05T20:31:56.005Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Archer MR200 v5.2",
              "vendor": "TP-Link Systems Inc.",
              "versions": [
                {
                  "lessThan": "1.2.0 Build 250917 Rel.51746",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "Archer C20 v6",
              "vendor": "TP-Link Systems Inc.",
              "versions": [
                {
                  "lessThan": "0.9.1 4.19 v0001.0 Build 250630 Rel.56583n",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "TL-WR850N v3",
              "vendor": "TP Link Systems Inc.",
              "versions": [
                {
                  "lessThan": "3.16.0 0.9.1 v6031.0 Build 251205 Rel.22089n",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "TL-WR845N v4",
              "vendor": "TP Link Systems Inc.",
              "versions": [
                {
                  "lessThan": "0.9.1 3.19 Build 251031 rel33710",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "Archer C20 v5",
              "vendor": "TP-Link Systems Inc.",
              "versions": [
                {
                  "lessThan": "US_V5_260419",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                },
                {
                  "lessThan": "EU_V5_260317",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "finder",
              "value": "Swaroop Dora, Deven Lunkad, Ashutosh Kumar, and S. Venkatesan from IoT Security Research Lab, Indian Institute of Information Technology, Allahabad"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "The response coming from TP-Link Archer MR200 v5.2, C20 v5 and v6, TL-WR850N v3, and TL-WR845N v4 for any request is getting executed by the JavaScript function like eval directly without any check.\u0026nbsp;Attackers can exploit this vulnerability via a Man-in-the-Middle (MitM) attack to execute JavaScript code on the router\u0027s admin web portal without the user\u0027s permission or knowledge."
                }
              ],
              "value": "The response coming from TP-Link Archer MR200 v5.2, C20 v5 and v6, TL-WR850N v3, and TL-WR845N v4 for any request is getting executed by the JavaScript function like eval directly without any check.\u00a0Attackers can exploit this vulnerability via a Man-in-the-Middle (MitM) attack to execute JavaScript code on the router\u0027s admin web portal without the user\u0027s permission or knowledge."
            }
          ],
          "impacts": [
            {
              "capecId": "CAPEC-153",
              "descriptions": [
                {
                  "lang": "en",
                  "value": "CAPEC-153 Input Data Manipulation"
                }
              ]
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "PRESENT",
                "attackVector": "ADJACENT",
                "baseScore": 5.9,
                "baseSeverity": "MEDIUM",
                "exploitMaturity": "NOT_DEFINED",
                "privilegesRequired": "NONE",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "PASSIVE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "LOW",
                "vulnConfidentialityImpact": "HIGH",
                "vulnIntegrityImpact": "LOW",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-95",
                  "description": "CWE-95 Improper Neutralization of Directives in Dynamically Evaluated Code (\u0027Eval Injection\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-04-22T21:35:19.737Z",
            "orgId": "f23511db-6c3e-4e32-a477-6aa17d310630",
            "shortName": "TPLink"
          },
          "references": [
            {
              "tags": [
                "patch"
              ],
              "url": "https://www.tp-link.com/en/support/download/archer-mr200/v5.20/#Firmware"
            },
            {
              "tags": [
                "patch"
              ],
              "url": "https://www.tp-link.com/en/support/download/archer-c20/v6/#Firmware"
            },
            {
              "tags": [
                "patch"
              ],
              "url": "https://www.tp-link.com/in/support/download/tl-wr850n/#Firmware"
            },
            {
              "tags": [
                "patch"
              ],
              "url": "https://www.tp-link.com/en/support/download/tl-wr845n/#Firmware"
            },
            {
              "tags": [
                "patch"
              ],
              "url": "https://www.tp-link.com/in/support/download/archer-mr200/v5.20/#Firmware"
            },
            {
              "tags": [
                "patch"
              ],
              "url": "https://www.tp-link.com/in/support/download/archer-c20/v6/#Firmware"
            },
            {
              "tags": [
                "patch"
              ],
              "url": "https://www.tp-link.com/in/support/download/tl-wr845n/#Firmware"
            },
            {
              "tags": [
                "vendor-advisory"
              ],
              "url": "https://www.tp-link.com/us/support/faq/4948/"
            },
            {
              "tags": [
                "patch"
              ],
              "url": "https://www.tp-link.com/us/support/download/archer-c20/v5/#Firmware"
            },
            {
              "tags": [
                "patch"
              ],
              "url": "https://www.tp-link.com/en/support/download/archer-c20/v5/#Firmware"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "title": "LAN Code Execution on TP-Link Archer MR200, Archer C20, TL-WR850N and TL-WR845N",
          "x_generator": {
            "engine": "Vulnogram 0.5.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "f23511db-6c3e-4e32-a477-6aa17d310630",
        "assignerShortName": "TPLink",
        "cveId": "CVE-2025-15551",
        "datePublished": "2026-02-05T17:22:55.600Z",
        "dateReserved": "2026-01-29T23:07:58.401Z",
        "dateUpdated": "2026-04-22T21:35:19.737Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-0834 (GCVE-0-2026-0834)

    Vulnerability from cvelistv5 – Published: 2026-01-21 17:14 – Updated: 2026-04-28 17:46
    VLAI
    Title
    Logic Vulnerability on TP-Link Archer C20, Archer AX53 and TL-WR841N v13
    Summary
    Logic vulnerability in TP-Link Archer C20 v5, 6.0, Archer AX53 v1.0 and TL-WR841N v13 (TDDP module) allows unauthenticated adjacent attackers to execute administrative commands including factory reset and device reboot without credentials. Attackers on the adjacent network can remotely trigger factory resets and reboots without credentials, causing configuration loss and interruption of device availability. This issue affects Archer C20 v6.0 < V6_251031, Archer C20 v5 <EU_V5_260317 or < US_V5_260419 Archer AX53 v1.0 < V1_251215 TL-WR841N v13 < 0.9.1 Build 20231120 Rel.62366
    SSVC
    Exploitation: poc Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-290 - Authentication Bypass by Spoofing
    Assigner
    Impacted products
    Vendor Product Version
    TP-Link Systems Inc. Archer C20 v6.0, Archer AX53 v1.0 Affected: 0 , < V6_251031 (custom)
    Affected: 0 , < V1_251215 (custom)
    Create a notification for this product.
    TP-Link Systems Inc. Archer C20 V5 Affected: 0 , < US_V5_260419 (custom)
    Affected: 0 , < EU_V5_260317 (custom)
    Create a notification for this product.
    TP Link Systems Inc. TL-WR841N v13 Affected: 0 , < 0.9.1 Build 20231120 Rel.62366 (custom)
    Create a notification for this product.
    Credits
    Matt Graham (mattg.systems) Ben Grinberg, Adiel Sol, Daniel Lubel, Erez Cohen, Nir Somech, Arad Inbar, Dream Group
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-0834",
                    "options": [
                      {
                        "Exploitation": "poc"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-01-22T04:55:49.767529Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-02-26T14:44:34.299Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "modules": [
                "tddp"
              ],
              "product": "Archer C20 v6.0, Archer AX53 v1.0",
              "vendor": "TP-Link Systems Inc.",
              "versions": [
                {
                  "lessThan": "V6_251031",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                },
                {
                  "lessThan": "V1_251215",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "modules": [
                "tddp"
              ],
              "product": "Archer C20 V5",
              "vendor": "TP-Link Systems Inc.",
              "versions": [
                {
                  "lessThan": "US_V5_260419",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                },
                {
                  "lessThan": "EU_V5_260317",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "TL-WR841N v13",
              "vendor": "TP Link Systems Inc.",
              "versions": [
                {
                  "lessThan": "0.9.1 Build 20231120 Rel.62366",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "finder",
              "value": "Matt Graham (mattg.systems)"
            },
            {
              "lang": "en",
              "type": "finder",
              "value": "Ben Grinberg, Adiel Sol, Daniel Lubel, Erez Cohen, Nir Somech, Arad Inbar, Dream Group"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "Logic vulnerability \u003cspan\u003ein TP-Link Archer C20 v5, 6.0, Archer AX53 v1.0 and TL-WR841N v13 (\u003c/span\u003eTDDP module) allows unauthenticated adjacent attackers to execute administrative commands including factory reset and device reboot without credentials.\u0026nbsp;Attackers on the adjacent network can remotely trigger factory resets and reboots without credentials, causing configuration loss and interruption of device availability.\u003cp\u003eThis issue affects Archer C20 v6.0 \u0026lt; V6_251031, Archer C20 v5 \u0026lt;EU_V5_260317 or \u0026lt;\u0026nbsp;US_V5_260419\u003cbr\u003e\n\nArcher AX53 v1.0 \u0026lt; \n\nV1_251215\u003c/p\u003e\u003cp\u003e\u003cspan\u003eTL-WR841N v13 \u0026lt;\u0026nbsp;\u003c/span\u003e\u003cspan\u003e0.9.1 Build 20231120 Rel.62366\u003c/span\u003e\u003c/p\u003e"
                }
              ],
              "value": "Logic vulnerability in TP-Link Archer C20 v5, 6.0, Archer AX53 v1.0 and TL-WR841N v13 (TDDP module) allows unauthenticated adjacent attackers to execute administrative commands including factory reset and device reboot without credentials.\u00a0Attackers on the adjacent network can remotely trigger factory resets and reboots without credentials, causing configuration loss and interruption of device availability.\n\nThis issue affects Archer C20 v6.0 \u003c V6_251031, Archer C20 v5 \u003cEU_V5_260317 or \u003c\u00a0US_V5_260419\n\n\nArcher AX53 v1.0 \u003c \n\nV1_251215\n\n\n\nTL-WR841N v13 \u003c\u00a00.9.1 Build 20231120 Rel.62366"
            }
          ],
          "impacts": [
            {
              "capecId": "CAPEC-88",
              "descriptions": [
                {
                  "lang": "en",
                  "value": "CAPEC-88 OS Command Injection"
                }
              ]
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "ADJACENT",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "exploitMaturity": "NOT_DEFINED",
                "privilegesRequired": "NONE",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "HIGH",
                "vulnConfidentialityImpact": "LOW",
                "vulnIntegrityImpact": "HIGH",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-290",
                  "description": "CWE-290 Authentication Bypass by Spoofing",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-04-28T17:46:59.608Z",
            "orgId": "f23511db-6c3e-4e32-a477-6aa17d310630",
            "shortName": "TPLink"
          },
          "references": [
            {
              "tags": [
                "patch"
              ],
              "url": "https://www.tp-link.com/en/support/download/archer-c20/v6/#Firmware"
            },
            {
              "tags": [
                "patch"
              ],
              "url": "https://www.tp-link.com/en/support/download/archer-ax53/v1/#Firmware"
            },
            {
              "url": "https://mattg.systems/posts/cve-2026-0834/"
            },
            {
              "tags": [
                "vendor-advisory"
              ],
              "url": "https://www.tp-link.com/us/support/faq/4905/"
            },
            {
              "tags": [
                "patch"
              ],
              "url": "https://www.tp-link.com/us/support/download/archer-c20/v5/#Firmware"
            },
            {
              "tags": [
                "patch"
              ],
              "url": "https://www.tp-link.com/en/support/download/archer-c20/v5/#Firmware"
            },
            {
              "tags": [
                "patch"
              ],
              "url": "https://www.tp-link.com/us/support/download/tl-wr841n/v13/#Firmware"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "title": "Logic Vulnerability on TP-Link Archer C20, Archer AX53 and TL-WR841N v13",
          "x_generator": {
            "engine": "Vulnogram 0.5.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "f23511db-6c3e-4e32-a477-6aa17d310630",
        "assignerShortName": "TPLink",
        "cveId": "CVE-2026-0834",
        "datePublished": "2026-01-21T17:14:55.179Z",
        "dateReserved": "2026-01-09T21:48:53.385Z",
        "dateUpdated": "2026-04-28T17:46:59.608Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2024-57049 (GCVE-0-2024-57049)

    Vulnerability from cvelistv5 – Published: 2025-02-18 00:00 – Updated: 2026-06-30 19:03

    DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

    Show details on NVD website

    {
      "containers": {
        "cna": {
          "providerMetadata": {
            "dateUpdated": "2026-06-30T19:03:14.367Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "rejectedReasons": [
            {
              "lang": "en",
              "value": "DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none."
            }
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2024-57049",
        "datePublished": "2025-02-18T00:00:00.000Z",
        "dateRejected": "2026-06-30T00:00:00.000Z",
        "dateReserved": "2025-01-09T00:00:00.000Z",
        "dateUpdated": "2026-06-30T19:03:14.367Z",
        "state": "REJECTED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2023-37284 (GCVE-0-2023-37284)

    Vulnerability from cvelistv5 – Published: 2023-09-06 09:24 – Updated: 2024-09-26 20:41
    VLAI
    Summary
    Improper authentication vulnerability in Archer C20 firmware versions prior to 'Archer C20(JP)_V1_230616' allows a network-adjacent unauthenticated attacker to execute an arbitrary OS command via a crafted request to bypass authentication.
    Severity
    No CVSS data available.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • Improper authentication
    Assigner
    Impacted products
    Vendor Product Version
    TP-LINK Archer C20 Affected: firmware versions prior to 'Archer C20(JP)_V1_230616'
    Create a notification for this product.
    tp-link archer_c20_firmware Affected: v1_230616
        cpe:2.3:o:tp-link:archer_c20_firmware:230616:*:*:*:*:*:*:*
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T17:09:34.039Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.tp-link.com/jp/support/download/archer-c20/v1/#Firmware"
              },
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://jvn.jp/en/vu/JVNVU99392903/"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "affected": [
              {
                "cpes": [
                  "cpe:2.3:o:tp-link:archer_c20_firmware:230616:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "archer_c20_firmware",
                "vendor": "tp-link",
                "versions": [
                  {
                    "status": "affected",
                    "version": "v1_230616"
                  }
                ]
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2023-37284",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-09-26T20:41:03.439517Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-09-26T20:41:42.264Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "Archer C20",
              "vendor": "TP-LINK",
              "versions": [
                {
                  "status": "affected",
                  "version": "firmware versions prior to \u0027Archer C20(JP)_V1_230616\u0027"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Improper authentication vulnerability in Archer C20 firmware versions prior to \u0027Archer C20(JP)_V1_230616\u0027 allows a network-adjacent unauthenticated attacker to execute an arbitrary OS command via a crafted request to bypass authentication."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "Improper authentication",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-09-06T09:24:42.525Z",
            "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
            "shortName": "jpcert"
          },
          "references": [
            {
              "url": "https://www.tp-link.com/jp/support/download/archer-c20/v1/#Firmware"
            },
            {
              "url": "https://jvn.jp/en/vu/JVNVU99392903/"
            }
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "assignerShortName": "jpcert",
        "cveId": "CVE-2023-37284",
        "datePublished": "2023-09-06T09:24:42.525Z",
        "dateReserved": "2023-08-15T07:33:40.187Z",
        "dateUpdated": "2024-09-26T20:41:42.264Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2023-30383 (GCVE-0-2023-30383)

    Vulnerability from cvelistv5 – Published: 2023-07-18 00:00 – Updated: 2024-10-28 18:35
    VLAI
    Summary
    TP-LINK Archer C50v2 Archer C50(US)_V2_160801, TP-LINK Archer C20v1 Archer_C20_V1_150707, and TP-LINK Archer C2v1 Archer_C2_US__V1_170228 were discovered to contain a buffer overflow which may lead to a Denial of Service (DoS) when parsing crafted data.
    Severity
    No CVSS data available.
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • n/a
    Assigner
    Impacted products
    Vendor Product Version
    tp-link archer_c50 Affected: v2_160801
        cpe:2.3:h:tp-link:archer_c50:-:*:*:*:*:*:*:*
    Create a notification for this product.
    tp-link archer_c20 Affected: v1_150707
        cpe:2.3:h:tp-link:archer_c20:1:*:*:*:*:*:*:*
    Create a notification for this product.
    tp-link archer_c2 Affected: v1_170228
        cpe:2.3:h:tp-link:archer_c2:-:*:*:*:*:*:*:*
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T14:21:44.817Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "http://tplink.com"
              },
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.tp-link.com/us/support/download/archer-c50/v2/#Firmware%29%2CTPLINK"
              },
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.tp-link.com/us/support/download/archer-c2/v1/#Firmware"
              },
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.tp-link.com/us/support/download/archer-c50/v2/#Firmware"
              },
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://gist.github.com/a2ure123/a4eda2813d85d8b414bb87e855ab4bf8"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "affected": [
              {
                "cpes": [
                  "cpe:2.3:h:tp-link:archer_c50:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "archer_c50",
                "vendor": "tp-link",
                "versions": [
                  {
                    "status": "affected",
                    "version": "v2_160801"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:tp-link:archer_c20:1:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "archer_c20",
                "vendor": "tp-link",
                "versions": [
                  {
                    "status": "affected",
                    "version": "v1_150707"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:tp-link:archer_c2:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "archer_c2",
                "vendor": "tp-link",
                "versions": [
                  {
                    "status": "affected",
                    "version": "v1_170228"
                  }
                ]
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2023-30383",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-10-28T18:32:54.899161Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-10-28T18:35:54.750Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "TP-LINK Archer C50v2 Archer C50(US)_V2_160801, TP-LINK Archer C20v1 Archer_C20_V1_150707, and TP-LINK Archer C2v1 Archer_C2_US__V1_170228 were discovered to contain a buffer overflow which may lead to a Denial of Service (DoS) when parsing crafted data."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-07-18T00:00:00.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "url": "http://tplink.com"
            },
            {
              "url": "https://www.tp-link.com/us/support/download/archer-c50/v2/#Firmware%29%2CTPLINK"
            },
            {
              "url": "https://www.tp-link.com/us/support/download/archer-c2/v1/#Firmware"
            },
            {
              "url": "https://www.tp-link.com/us/support/download/archer-c50/v2/#Firmware"
            },
            {
              "url": "https://gist.github.com/a2ure123/a4eda2813d85d8b414bb87e855ab4bf8"
            }
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2023-30383",
        "datePublished": "2023-07-18T00:00:00.000Z",
        "dateReserved": "2023-04-07T00:00:00.000Z",
        "dateUpdated": "2024-10-28T18:35:54.750Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }