PT-2021-17351 · Tp Link · Tp-Link Archer A7

Pedrib1337 + 3 · Published 2021-02-24 · Updated 2021-04-01 · CVE-2021-27245

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: TP-Link Archer A7 versions prior to Archer C7(US) V5 210125 and Archer A7(US) V5 200220

Description: This issue allows for a firewall bypass on affected installations. It does not require authentication to exploit. The flaw exists within the handling of IPv6 connections, specifically due to the lack of proper filtering of IPv6 SSH connections. An attacker can leverage this, potentially in conjunction with other issues, to execute code in the context of root.

Recommendations: For TP-Link Archer A7 versions prior to Archer C7(US) V5 210125 and Archer A7(US) V5 200220, update to a version that includes the necessary security patches to address the firewall bypass issue. As a temporary workaround, consider restricting IPv6 SSH connections to minimize the risk of exploitation.

Fix

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

CVE-2021-27245

ZDI-21-214

Affected Products

Tp-Link Archer A7

References · 3

• https://zerodayinitiative.com/advisories/ZDI-21-214 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-27245 · Security Note
• https://osv.dev/vulnerability/CVE-2021-27245 · Vendor Advisory