Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-37284

Improper authentication vulnerability in Archer C20 firmware versions prior to 'Archer C20(JP)_V1_230616' allows a network-adjacent unauthenticated attacker to execute an arbitrary OS command via a crafted request to bypass authentication.

Published

2023-09-06T10:15:13.770

Last Modified

2024-11-21T08:11:23.740

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.8 (HIGH)

Weaknesses
  • Type: Primary
    CWE-287
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System tp-link archer_c20_firmware < 230616 Yes
Hardware tp-link archer_c20 1 No
References