PT-2020-12398 · Tp Link · Tp-Link Archer A7

James Loureiro + 3 · Published 2020-03-25 · Updated 2020-04-01 · CVE-2020-10886

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TP-Link Archer A7 Firmware version 190726

Description This issue allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 routers. Authentication is not required to exploit this issue. The specific flaw exists within the tmpServer service, which listens on TCP port 20002. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this issue to execute code in the context of the current process.

Recommendations For TP-Link Archer A7 Firmware version 190726, as a temporary workaround, consider disabling the tmpServer service until a patch is available. Restrict access to TCP port 20002 to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2020-10886

ZDI-20-339

Affected Products

Tp-Link Archer A7

References · 4

• https://osv.dev/vulnerability/CVE-2020-10886 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-20-339 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-10886 · Security Note
• https://t.me/cvenotify/2162 · Telegram Post