PT-2020-12394 · Tp Link · Tp-Link Archer A7

Pedro Ribeiro

+1

·

Published

2020-03-25

·

Updated

2023-02-03

·

CVE-2020-10882

CVSS v3.1

8.8

High

VectorAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions TP-Link Archer A7 Firmware version 190726
Description This issue allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 routers. Authentication is not required to exploit this issue. The specific flaw exists within the tdpServer service, which listens on UDP port 20002 by default. When parsing the slave mac parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this issue to execute code in the context of the root user.
Recommendations For TP-Link Archer A7 Firmware version 190726, as a temporary workaround, consider disabling the tdpServer service until a patch is available. Restrict access to the tdpServer daemon to minimize the risk of exploitation. Avoid using the slave mac parameter in the affected service until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2020-10882
ZDI-20-334

Affected Products

Tp-Link Archer A7