PT-2023-2009 · Tp Link · Tp-Link Archer C50

A2Ure · Published 2023-02-21 · Updated 2024-05-17 · CVE-2023-0936

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions TP-Link Archer C50 version V2 160801

Description A vulnerability in the Web Management Interface component of the TP-Link Archer C50 can be exploited to cause a denial of service. The issue is related to incorrect clearance or release of resources. The attack can be initiated remotely and may allow an attacker to disrupt service. The exploit has been disclosed publicly.

Recommendations For TP-Link Archer C50 version V2 160801, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

BDU:2023-01633

CVE-2023-0936

Affected Products

Tp-Link Archer C50

References · 6

• 🔥 https://vuldb.com/?id.221552 · Exploit
• https://osv.dev/vulnerability/CVE-2023-0936 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-01633 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-0936 · Security Note
• https://vuldb.com/?ctiid.221552 · Note
• https://twitter.com/vuldb/status/1708981070669152468 · Twitter Post