CVE-2023-39224

Summary

Archer C5 firmware all versions and Archer C7 firmware versions prior to 'Archer C7(JP)_V2_230602' allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Note that Archer C5 is no longer supported, therefore the update for this product is not provided.

Affected Software

VendorProductVersion RangeStatus
TP-LINKArcher C5firmware all versionsaffected
TP-LINKArcher C7firmware versions prior to 'Archer C7(JP)_V2_230602'affected

Weaknesses

  • OS command injection

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References