Skip to content
CVE PROGRAM SOURCE RECORD8.0 High

CVE-2023-31188

Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer C50 firmware versions

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
jpcert

Description

Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer C50 firmware versions prior to 'Archer C50(JP)_V3_230505', Archer C55 firmware versions prior to 'Archer C55(JP)_V1_230506', and Archer C20 firmware versions prior to 'Archer C20(JP)_V1_230616'.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TP-LINK Archer C50

  • firmware versions prior to 'Archer C50(JP)_V3_230505'affected

TP-LINK Archer C55

  • firmware versions prior to 'Archer C55(JP)_V1_230506'affected

TP-LINK Archer C20

  • firmware versions prior to 'Archer C20(JP)_V1_230616'affected

References