PT-2020-12400 · Tp Link · Tp-Link Archer A7

James Loureiro + 3 · Published 2020-03-25 · Updated 2020-04-01 · CVE-2020-10888

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TP-Link Archer A7 Firmware version 190726

Description This issue allows remote attackers to bypass authentication on affected installations. The specific flaw exists within the handling of SSH port forwarding requests during initial setup, resulting from the lack of proper authentication prior to establishing SSH port forwarding rules. An attacker can leverage this to escalate privileges to resources normally protected from the WAN interface.

Recommendations For TP-Link Archer A7 Firmware version 190726, as a temporary workaround, consider disabling SSH port forwarding until a patch is available. Restrict access to the WAN interface to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2020-10888

ZDI-20-340

Affected Products

Tp-Link Archer A7

References · 4

• https://zerodayinitiative.com/advisories/ZDI-20-340 · Security Note
• https://osv.dev/vulnerability/CVE-2020-10888 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-10888 · Security Note
• https://t.me/cvenotify/2164 · Telegram Post