PT-2026-3791 · Tp Link · Archer C20+1

Matt Graham · Publicado 2026-01-21 · Atualizado 2026-02-02 · CVE-2026-0834

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TP-Link Archer C20 versions prior to V6 251031 TP-Link Archer AX53 version prior to V1 251215

Description A logic issue exists in the TDDP module of TP-Link Archer C20 v6.0 and Archer AX53 v1.0. An unauthenticated attacker on an adjacent network can execute administrative commands, including factory reset and device reboot, without credentials. This can lead to configuration loss and interruption of device availability.

Recommendations Update TP-Link Archer C20 to version V6 251031 or later. Update TP-Link Archer AX53 to version V1 251215 or later.

Correção

Authentication Bypass by Spoofing

Enumeração de Fraquezas

CWE-290

Identificadores relacionados

BDU:2026-01009

CVE-2026-0834

Produtos afetados

Archer Ax53

Archer C20

Referências · 14

• https://t.me/CVEtracker/42682 · Publicação no Telegram
• https://killing.systems/posts/cve-2026-0834 · Nota
• https://twitter.com/mattgsys/status/2018404945582538833 · Publicação no Twitter
• https://tp-link.com/us/support/download/archer-c20/v5/#Firmware · Correção
• https://osv.dev/vulnerability/CVE-2026-0834 · Aviso do Fabricante
• https://tp-link.com/us/support/faq/4905 · Aviso do Fabricante
• https://tp-link.com/uk/support/faq/4905 · Nota
• https://tp-link.com/en/support/download/archer-c20/v5/#Firmware · Correção
• https://mattg.systems/posts/cve-2026-0834 · Nota
• https://tp-link.com/en/support/download/archer-ax53/v1/#Firmware · Correção
• https://tp-link.com/us/support/download/tl-wr841n/v13/#Firmware · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2026-0834 · Nota de Segurança
• https://bdu.fstec.ru/vul/2026-01009 · Nota de Segurança
• https://tp-link.com/en/support/download/archer-c20/v6/#Firmware · Correção