PT-2018-14986 · Tp Link · Tp-Link Archer C5

Jackdoan + 1 · Published 2018-11-26 · Updated 2018-12-28 · CVE-2018-19537

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TP-Link Archer C5 devices through V2 160201 US

Description The issue allows remote command execution via shell metacharacters on the wan dyn hostname line of a configuration file. This configuration file is encrypted with the 478DA50BF9E3D2CF key and can be uploaded through the web GUI using the web admin account. In some cases, the default password 'admin' may be used.

Recommendations For TP-Link Archer C5 devices through V2 160201 US, change the default admin password to a strong and unique password to prevent unauthorized access. As a temporary workaround, consider restricting access to the web GUI and the configuration file upload feature until a patch is available. Avoid using the default password and ensure that all configuration files are handled securely to minimize the risk of exploitation.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2018-19537

Affected Products

Tp-Link Archer C5

References · 3

• 🔥 https://github.com/JackDoan/TP-Link-ArcherC5-RCE · Exploit
• https://osv.dev/vulnerability/CVE-2018-19537 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-19537 · Security Note