PT-2023-23914 · Tp Link · Archer C55+1

Published 2023-09-06 · Updated 2024-09-26 · CVE-2023-32619

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Archer C50 versions prior to Archer C50(JP) V3 230505 Archer C55 versions prior to Archer C55(JP) V1 230506

Description The affected devices use hard-coded credentials to login, which may allow a network-adjacent unauthenticated attacker to execute an arbitrary OS command.

Recommendations For Archer C50 versions prior to Archer C50(JP) V3 230505, update to Archer C50(JP) V3 230505 or later. For Archer C55 versions prior to Archer C55(JP) V1 230506, update to Archer C55(JP) V1 230506 or later.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2023-32619

Affected Products

Archer C50

Archer C55

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2023-32619 · Security Note
• https://osv.dev/vulnerability/CVE-2023-32619 · Vendor Advisory
• https://jvn.jp/en/vu/JVNVU99392903 · Note
• https://tp-link.com/jp/support/download/archer-c55/#Firmware · Note
• https://t.me/cvenotify/96249 · Telegram Post
• https://tp-link.com/jp/support/download/archer-c50/v3/#Firmware · Note
• https://t.me/cvenotify/57931 · Telegram Post
• https://twitter.com/CVEnew/status/1699356400424722492 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1699400910298894555 · Twitter Post
• https://t.me/cibsecurity/69983 · Telegram Post