PT-2023-2937 · Tp Link · Tp-Link Archer C7

A2Ure · Published 2023-05-11 · Updated 2025-01-24 · CVE-2023-2646

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions TP-Link Archer C7v2 version v2 en us 180114

Description A vulnerability has been found in the component GET Request Parameter Handler, which can lead to denial of service when exploited. The attack can only be done within the local network. The issue is related to incorrect clearance or release of resources.

Recommendations For TP-Link Archer C7v2 version v2 en us 180114, as a temporary workaround, consider restricting access to the GET Request Parameter Handler component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

BDU:2023-02939

CVE-2023-2646

Affected Products

Tp-Link Archer C7

References · 7

• https://osv.dev/vulnerability/CVE-2023-2646 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-2646 · Security Note
• https://bdu.fstec.ru/vul/2023-02939 · Security Note
• https://vuldb.com/?ctiid.228775 · Note
• https://t.me/cvenotify/108510 · Telegram Post
• https://vuldb.com/?id.228775 · Note
• https://t.me/cibsecurity/63866 · Telegram Post