PT-2020-20619 · Tp Link · Tp-Link Archer C50

Lohitya Pushkar · Published 2020-03-25 · Updated 2026-03-05 · CVE-2020-9375

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions TP-Link Archer C50 V3 devices before Build 200318 Rel. 62209

Description The issue allows remote attackers to cause a denial of service via a crafted HTTP Header containing an unexpected Referer field. This can lead to service disruption.

Recommendations For TP-Link Archer C50 V3 devices before Build 200318 Rel. 62209, update to a version after Build 200318 Rel. 62209 to resolve the issue. As a temporary workaround, consider restricting access to the device to minimize the risk of exploitation.

Exploit

Fix

DoS

Missing Release of Resource after Effective Lifetime

Weakness Enumeration

CWE-772

Related Identifiers

CVE-2020-9375

Affected Products

Tp-Link Archer C50

References · 11

• 🔥 https://github.com/thewhiteh4t/cve-2020-9375 · Exploit
• 🔥 http://packetstormsecurity.com/files/156928/TP-Link-Archer-C50-V3-Denial-of-Service.html · Exploit
• 🔥 https://thewhiteh4t.github.io/2020/02/27/CVE-2020-9375-TP-Link-Archer-C50-v3-Denial-of-Service.html · Exploit
• 🔥 https://exploit-db.com/exploits/48255 · Exploit
• https://tp-link.com/in/support/download/archer-c50/v3/#Firmware · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-9375 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-9375 · Security Note
• https://t.me/cybersecuritytechnologies/856 · Telegram Post
• https://t.me/cveNotify/154372 · Telegram Post
• https://thewhiteh4t.github.io/blog/cve-2020-9375-tplink · Note
• https://t.me/cvenotify/2122 · Telegram Post